Senior Penetration Tester

Job Purpose :

As part of the Kuala Lumpur based Offensive Security team, you will be responsible for planning, conducting penetrations tests across Commerzbank Group, documenting the results and providing advisory on the closure of identified findings. Operating primarily remotely, the role focuses on identifying vulnerabilities in IT infrastructure and applications ensuring proactive risk mitigation and compliance with internal and external security standards. In your role, you will closely collaborate with central teams in Commerzbank to strengthen the bank’s overall security posture.

Key Activities :

• As a specialist of offensive security, you’re testing IT applications and infrastructure of the bank of vulnerabilities and simulate attacks.
• Responsible for the full process of those threat analyses, from planning to execution up to reporting. It’s part of those lifecycles to develop targeted techniques and exploits.
• Based on the technical vulnerabilities and respective business processes you do develop risk ratings as well as risk mitigation strategies.
• Analysis of product, protocols and cryptographic implementation are part of the job profile.

Formal Education :

• Completed university degree of IT Security, Computer Science or comparable qualification.

Specialist Knowledge :

• Sound experience in the areas Penetration Testing and Red Teaming.
• Very good knowledge in operation systems, network and cloud technologies.
• Good level of understanding in at least two scripting or programming languages.
• Extensive experience in finding and exploiting vulnerabilities as well profound understanding of cryptographic primitives and concepts.
• Fluent written and spoken English, especially when it comes to technical terms.
• Ability to constantly learn as well as willing to travel.
• Pronounced ability to work in a team and high flexibility.