Cyber Security Analyst

About the role

VIRTHIO is seeking a Cyber Security Analyst to strengthen the security posture of its financial‑sector clients. You will evaluate penetration‑test findings, reproduce vulnerabilities, and ensure that remediation actions are effective and compliant with industry regulations.

Key responsibilities

• Assess the technical correctness, severity and business impact of findings from penetration tests and security assessments.
• Reproduce reported vulnerabilities, validate fixes and sign‑off on remediation.
• Collaborate with engineering, operations and SecOps teams to translate pentest recommendations into viable mitigation strategies.
• Review remediation extension requests, evaluating technical justification and residual risk.
• Serve as the main liaison between pentest vendors, system owners and risk stakeholders, requesting clarifications as needed.
• Ensure testing workflows comply with DORA, TIBER‑EU/DE, EBA ICT & Security Guidelines and BAIT.
• Contribute to the evolution of the enterprise pentesting framework and define quality benchmarks for vulnerability resolution.

Required profile

• Minimum 3 years of hands‑on experience in penetration testing, red teaming, security assessments or secure software engineering.
• Strong knowledge of vulnerability taxonomies and common attack vectors.
• Experience with financial‑sector cybersecurity frameworks (BAIT, EBA ICT & Security Guidelines, DORA, TIBER‑EU/DE).
• Proven ability to reproduce vulnerabilities and verify remediation effectiveness.
• Excellent attention to detail and communication skills for interaction with technical and managerial audiences.
• Fluent English (B2 or higher) and willingness to travel when required.

Required skills

• Penetration testing
• Red teaming
• Security assessments
• Vulnerability management platforms
• Jira (ticketing tool)
• Knowledge of BAIT, EBA ICT & Security Guidelines, DORA, TIBER‑EU/DE

What we offer

• Open‑mindset environment where ideas are welcomed.
• Dynamic, collaborative team with opportunities for career progression.
• Continuous learning and participation in innovative projects.
• Flexible working hours and hybrid work model.