Position: Senior Penetration Tester

Krungthai Bank PCL.

Role Definition

Assists in finding vulnerabilities using penetration testing tools and techniques to ensure the security of computer systems, applications, servers, networks, etc. Strengthens the security posture by simulating cyberattacks and identifying vulnerabilities before malicious actors exploit them.

Krungthai Bank is looking for a highly skilled, hands-on Senior Penetration Tester who independently plans and executes comprehensive tests across networks, applications, web and mobile infrastructure uncovering exploitable vulnerabilities before malicious actors do.

Responsibilities

1. Plan and manage the execution of penetration testing on various systems, including networks, applications, and web infrastructure.
2. Perform penetration tests to simulate real-world cyberattacks and exploit identified vulnerabilities using various attack vectors.
3. Analyze and interpret test results to identify potential security risks, recommend appropriate remediation measures, and communicate findings with stakeholders.
4. Assist in the design and implementation of organizational information security solutions, continuously enhancing security approaches and methodologies.
5. Conduct security code reviews to identify and mitigate vulnerabilities in application code.
6. Write penetration test cases for web-based applications, mobile applications and networks to enhance security for internal and external clients.
7. Manage external penetration testing consultants/vendors to ensure test results meet quality standards and business objectives.

Qualifications

• Bachelor's or Master's degree in Computer Science, Computer Engineering, or a related IT field.
• 5+ years hands-on penetration testing
• OSCP / OSCE / CRTO or equivalent
• Web, API, mobile and network depth
• Exploit and tool development
• Financial-sector / TIBER-style testing
• Clear technical and business reporting