Offensive Security Specialist
Tallinn, Estonia
Luminor Group
Join our team as an Offensive Security Specialist!
Yes, you can! That's our attitude towards our work, ambitions, ideas and relationships. We, at Luminor, believe that anyone has the potential to achieve big things and encourage everyone to achieve them – professionally and personally.
Whoever you are, and whatever your role is, with Luminor you will get a once-in-a-lifetime opportunity to build a local banking champion.
What You Will Do:
- Safely utilize tools, tactics, and procedures used in penetration testing engagements
- Maintain automated penetration testing tool-/s, its licenses, and capacities
- Execute automated penetration tests and security assessments, identify and assess incorrect configurations and security vulnerabilities on internal and external networks, Windows and Linux environments, cloud (AWS and Azure) architecture, IoT devices and more
- Assess application and solution security controls against «black box», «grey box» and «white box» attacks using manual & automated penetration techniques
- Perform worst-case scenarios modelling and scope creation, as well as execute relevant tests based upon the results
- Create final test reports that detail how the penetration testing was performed and the results if there were vulnerabilities discovered
- Produce complete and accurate reports for both technical and executive audiences correlating with risk
- Provide technical guidance for remediation of findings.
- Assist in business risk assessment based on identified vulnerabilities and provide recommendations for cost-effective security controls
- Lead the Offensive security team
What We Expect:
- Experience with vulnerability scanning tools like Qualys, Tenable, Nessus
- Knowledge of network protocols, including ARP, DNS, and TCP/IP
- Knowledge of vulnerability scoring systems (CVSS/CMSS)
- Advanced expertise in exploits and vulnerabilities
- Deep understanding of various operating systems, including Windows, Linux, and Unix
- Knowledge of information cybersecurity best practice concepts, governance models, frameworks, standards
- Penetration testing related certifications - CEH, OSCP, GPEN, and others
- Efficient prioritization skills
- Strategic thinking and analytical skills
- Effective communication skills
- Fluent English is required in spoken and written communication due to working on Pan-Baltic level
What We Offer:
- Flexibility. Flexible working hours, remote work and a possibility to work from anywhere in the EU, Iceland, Switzerland and the UK (in total 90 days per year)
- International teams. Teams that go outside Pan-Baltic borders where people value challenging work together with good humor and having fun
- More vacation. Additional weeks of vacation are available to all employees who have been in the company for 1 year or more
- Volunteer time off. We care about giving back to society, therefore, you will get additional days off for volunteering purposes
- Paid leave. We are proud of our employees who are participating in military training. Therefore, Luminor offers 30 fully paid calendar days for military training every year
- Health benefits. A competitive benefits package in addition to your salary that includes health insurance after the first 3 months pass in all three Baltic states as well as Health days in case of your absence due to sickness without a doctor's note needed
- Wellbeing. Access to tools and resources that help to feel good and be productive at work and in life
- Professional growth. Internal and external training programs, workshops, conferences, online training etc.
- Special Offer for Luminor products & services. Enjoy special offers & pricing for products and services provided by Luminor
- Gross salary. 3000 - 4500 EUR/month, which is to be determined depending on your level of experience and competencies
The application deadline is 2nd of February. We are looking for a candidate primarily already located within the Baltics please apply with your CV in English and PDF format!
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: AWS Azure Banking Black box CEH Cloud CVSS DNS Exploits Governance GPEN IoT Linux Nessus Offensive security OSCP Pentesting Qualys Risk assessment Security assessment TCP/IP UNIX Vulnerabilities White box Windows
Perks/benefits: Competitive pay Conferences Flex hours Flex vacation Health care
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.