You will be part of the IT Infrastructure & Operations department and report to the IT Security Team Lead.

• You will contribute to the further development and improvement of processes related to penetration testing and vulnerability management.
• You will help identify and implement process improvements to keep pace with the rapidly evolving cybersecurity landscape.
• You will collaborate closely with penetration testers, Cyber Defence teams, Product Owners, Architects, and Developers.
• You will actively contribute to maintaining a secure environment with a strong focus on the customer.

Within the IT Security domain, you will work closely with other security specialists and take ownership of specific topics. You will help establish a structured and effective approach to penetration testing and vulnerability management.

Your Role

• Together with our external suppliers, you will be responsible for ensuring that penetration tests on our applications and systems are carried out correctly and on time. Your responsibilities will include coordinating schedules, refining test scopes, monitoring and validating the execution of tests, and following up on the remediation of identified findings.
• Similarly, within Vulnerability Management, you will contribute to identifying, prioritizing, analyzing, and monitoring risks across our IT landscape.
• You have experience with code reviews and are able to analyze and interpret the results of security-related code scanning tools.
• You will monitor SAST, DAST, SCA, and secret-scanning controls within CI/CD pipelines.
• You will perform maturity assessments and drive continuous improvements within the Secure Software Development Lifecycle (SSDLC).
• You will use your security expertise to assess risks and evaluate the quality of services provided by our suppliers, providing guidance and adjustments where necessary.
• You will report on results and risks to a broad range of stakeholders across the organization. You will also contribute to the development of new reporting methods and dashboards.

Argenta and You

• You work proactively, with a risk-driven and pragmatic approach.
• You act as a bridge between Security and the wider organization.
• You actively contribute to increasing the maturity of our security practices.

Your Profile

• Experience in test coordination or managing/leading people.
• Strong planning and organizational skills, with the ability to flexibly adjust testing activities when required.
• Able to assess workloads together with testers.
• Strong communication skills and the ability to clearly report and explain test results.
• Able to understand, analyze, and interpret security vulnerabilities.
• Strong stakeholder communication skills, particularly when coordinating activities and following up on remediation efforts.

Technical Knowledge

• General knowledge of web applications.
• Understanding of web services and API testing, including SOAP, REST, WSDL, endpoints, server ports, JMeter, SoapUI, etc.
• Able to interpret infrastructure and architecture diagrams.
• Good knowledge of computer networks and networking concepts.
• Knowledge of infrastructure-related security vulnerabilities.
• Experience working with vulnerability scanners.

Tools & Domain Knowledge

• Experience with Jira and Confluence.
• Knowledge of the banking sector is considered a plus.
• Knowledge of security vulnerabilities is an advantage.
• Experience with penetration testing or interpreting penetration test reports is a strong asset.
• Familiar with OWASP, CVEs, and vulnerability risk assessments, including evaluating both impact and likelihood.