Pentester Findings & Cyber Security Analyst

About the role

We are seeking a Pentester Findings & Cyber Security Analyst to join a leading financial institution. You will act as the bridge between penetration testing teams and business units, ensuring that identified vulnerabilities are accurately assessed, validated, and remediated.

Key responsibilities

• Review, analyse and validate findings from penetration testing reports for technical accuracy and alignment with internal security standards.
• Assess severity, relevance and reproducibility of vulnerabilities and request clarifications when needed.
• Validate proposed remediation measures and ensure they effectively address the findings before closure.
• Support engineering, operations and business stakeholders in interpreting findings and remediation recommendations.
• Advise teams on appropriate mitigation strategies and review extension requests for open findings.
• Collaborate with system owners, testers, security operations and risk stakeholders throughout the remediation lifecycle.
• Provide constructive feedback on remediation quality and contribute to improving the enterprise‑wide penetration testing framework.
• Ensure activities remain aligned with regulatory requirements such as BAIT, EBA, DORA and TIBER‑EU.

Required profile

• Minimum 3 years of hands‑on experience in penetration testing, security assessments, red teaming, application or infrastructure security.
• Experience working in regulated financial environments and applying frameworks like BAIT, EBA ICT & Security Guidelines, DORA and TIBER‑EU/TIBER‑DE.
• Strong analytical, problem‑solving and attention‑to‑detail skills.
• Excellent communication and stakeholder‑management abilities for both technical and non‑technical audiences.

Required skills

• Penetration testing
• Red teaming
• Application security
• Infrastructure security
• Secure software development
• OWASP Top 10
• SANS Top 25
• BAIT
• EBA ICT & Security Guidelines
• DORA
• TIBER‑EU / TIBER‑DE
• Vulnerability management platforms
• JIRA ticketing system