Senior Penetration Tester

Senior Penetration Tester Miejsce pracy: Kraków Technologies we use Expected iOS Android About the project This job role is responsible for providing subject matter expertise in Penetration Testing to support wider Cyber Security efforts and organization. The successful candidate will operate as part of a global/regional team within the Cybersecurity organization to provide expertise, oversight and assurance around security process, controls, standards and regulatory requirements. Your responsibilities Perform highly technical/analytical security assessments of custom mobile applications, widely understood infrastructure and networks, web services and APIs. Work closely with the DevOps teams to ensure that the security testing requirements are met and help automate repetitive tasks. Develop understanding of business functionality and apply testing methodology as appropriate to technologies and risks. Code and demonstrate basic proof-of-concept exploits of vulnerabilities when required. Assist with coordination of security testing projects according to a structured process, including writing test plans, test cases and test reports. Assess product release risk and complexity and identify potential misuse scenarios through review of business requirements and design specifications. Assist with tracking, remediation, and risk acceptance for identified security vulnerabilities. Assist in planning, test execution and vulnerability mitigation. Run evaluations of new security testing technologies and provide recommendations. Monitor security industry information sources and keep abreast of events, research, and developments. Identify opportunities to improve our processes, quality of the work and efficiencies. Our requirements Be subject matter expert in at least 1 of penetration testing domains (i.e. infrastructure/apps/mobile). At least 5 years of prior demonstrable hands-on experience in penetration testing. Solid understanding of the platform security models for iOS and Android platforms. Excellent understanding of platform-specific security risks, common vulnerabilities for mobile applications, common risks in financial applications. Practical knowledge of penetration testing of widely understood infrastructure, web and mobile technologies, using manual and automated testing methods. Excellent TCP/IP knowledge and understanding of security implications/issues. Strong web application testing experience. Proven programming/scripting skills. Ability to explain security functionality from first principles. Ability to adapt and apply information to new scenarios and technologies. Strong understanding of applied use of cryptography in application development. What we offer Competitive salary Annual performance-based bonus Additional bonuses for recognition awards Multisport card Private medical care Life insurance One-time reimbursement of home office set-up (up to 800 PLN) Corporate parties & events CSR initiatives Nursery discounts Financial support with trainings and education Social fund Flexible working hours Free parking Benefits sharing the costs of sports activities private medical care sharing the costs of professional training & courses life insurance remote work opportunities flexible working time integration events corporate sports team doctor’s duty hours in the office retirement pension plan corporate library no dress code coffee / tea parking space for employees leisure zone extra social benefits employee referral program opportunity to obtain permits and licenses charity initiatives family picnics extra leave In-office gym Recruitment stages Online assessment Phone interview Job interview Welcome to HSBC HSBC Service Delivery (Polska) Sp. z o.o. HSBC is one of the world’s largest banking and financial services organisations. Our global businesses serve more than 40 million customers worldwide through a network that covers 63 countries and territories. HSBC Service Delivery (Polska) Sp. z o.o. is HSBC's global finance, operations, risk and technology centre. We use our unique expertise and capabilities to provide specialised services – our people range from technologists transforming the banking experience to operations professionals managing 1.7 trillion payments a year. Our Purpose – Opening up a world of opportunity – explains why we exist. We are bringing together the people, ideas and capital that nurture progress and growth, helping to create a better world – for our customers, our people, our investors, our communities and the planet we all share. Thank you for interest in HSBCBefore you apply, please note that we will take into the consideration only applications that include the following statement:.“I hereby declare that I have familiarised myself with the Privacy Statement for Applicants published at http://www.about.hsbc.pl/careers and I give my consent to use my personal data included in my application for the purposes of recruitment in HSBC Service Delivery (Polska) Sp. z o. o. according to the rules described in the Privacy Statement for Applicants, as per the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).”.Due to the high number of applications, we reserve the right to contact selected candidates onlyIn case you would like to resign from participation in the recruitment process or withdraw previously sent application, please email us at: krakow.recruitmenthsbc.com.

Location: Kraków, PL

Posted Date: 4/19/2025