Penetration Tester

The role is hybrid (with 1-2 days/week from office) and full-time, CIM. Our office is located in Bucharest, Romania.

Overview:
We are seeking a skilled and experienced Penetration Tester to join the Canadian Bank Note IDPS team located in Romania. Canadian Bank Note is a world-leading supplier of Identification and Border Management Software Systems.

General Objectives:

• Understand the technical security gaps within our global systems, articulate possible solutions and support teams to get issues resolved.
• Research tooling and strategies for CBN's AppSec program to address risk assessments in an automated fashion at scale. Build relationships with stakeholders across groups to understand assessment needs, advise on how it should be handled and the associated notification process.
• CBN systems are deployed in 80+ countries and are key components of national security critical infrastructure. You will advise on security improvements and methodologies to ensure our customers and their customers stay safe.

Responsibilities:

1.
Conducting Penetration Testing:

· Plan, execute, and analyze penetration tests on web applications, networks, and systems to identify vulnerabilities and weaknesses.

· Perform both manual and automated testing methodologies to simulate real-world cyber-attacks.

2.
Vulnerability Assessment:

· Conduct comprehensive vulnerability assessments and analyze results to prioritize and address high-risk areas.

· Stay abreast of emerging threats, vulnerabilities, and security technologies to continually improve testing methodologies.

3.
Reporting and Documentation:

· Prepare detailed and clear reports outlining identified vulnerabilities, potential exploits, and recommended remediation strategies.

· Provide documentation on testing methodologies, tools used, and recommendations for risk mitigation.

4.
Collaboration:

· Work closely with cross-functional teams, including developers, system administrators, and IT support, to ensure effective communication and remediation of identified vulnerabilities.

· Collaborate with stakeholders to understand business processes and provide security guidance.

5.
Continuous Improvement:

· Participate in the development and enhancement of security policies, procedures, and best practices.

· Actively contribute to the improvement of the overall security program through feedback and proactive initiatives.

· Research and deploy automated tooling to address Security Assessments at scale

Qualifications:

Professional Experience:

· 3 years of proven experience in penetration testing and vulnerability assessments.

· Additional 5 years experience in IT operations

· Knowledge of industry-standard frameworks such as OWASP, NIST, and common security standards.

2.
Technical Skills:

· Proficiency in using penetration testing tools and frameworks

· Strong understanding of network protocols, operating systems, and web technologies.

· Expertise with Linux and/or Tomcat administration

· Experience with one or more cloud platforms such as Azure, AWS is
desirable

3.
Certifications:

· Relevant certifications such as Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), or other related certifications are highly
desirable
.

4.
Communication Skills:

· Excellent English communication skills.

· Ability to convey complex technical information to non-technical stakeholders.

5.
Analytical Thinking:

· Strong analytical and problem-solving skills with attention to detail.

· Good knowledge of external cyber threats and counter measures

6.
Education
:

· Bachelor's degree or master's degree in Computer Science or Engineering, or related field is desirable

If you are passionate about cybersecurity, possess strong technical skills, and enjoy the challenge of identifying and mitigating security risks, we invite you to apply for this exciting opportunity to contribute to our organization's ongoing commitment to a secure and resilient IT environment.