Posted 4 days ago
No clicks
**Warsaw VP - Security Engineering: Penetration Tester** Lead internal penetration testing for Goldman Sachs across web apps, infrastructure, and cloud. Collaborate with tech teams and push SecOps boundaries using AI tools. Leverage skills in web security, reverse engineering, and network protocols. Responsibilities: - Penetration testing of diverse applications - Leverage AI tools for targeted testing - Collaborate with tech teams to address vulnerabilities - Share knowledge with internal pentesting community Requirements: - Experience in penetration testing of web apps, infrastructure, and cloud - Proficiency in web security, reverse engineering, and network protocols - Experience with common security tools (Burp Suite, Wireshark, Ghidra) - Knowledge of one or more languages (Java, Python, C++) - Exploitation framework experience (Metasploit) beneficial - Bachelor's in Computer Science, Cyber Security, or similar preferred
- Compensation
- Not specified
- City
- Warsaw
- Country
- Poland
Currency: Not specified
Full Job Description
RISK ADVISORY delivers best in class advisory support and technology solutions across the information security risk domain including scalable uplifts of common core security solutions for use across Goldman Sachs. Prevents the misuse, unauthorized disclosure, or loss of firm data across e-mail, file transfer, and the Internet. Ensures business continuity and technology resilience by safeguarding Goldman Sachs from major operational disruptions through preventative measures including business planning, capability design, and the testing of mitigants.
ROLE DESCRIPTION
You will be a member of a strong community of internal penetration testers, with exposure to all parts of the firm and its most critical systems. The role involves penetration testing of a wide variety of applications, including web applications, infrastructure and cloud. You will work on the leading edge of AI transformation in information security using latest LLM models, building new tools and redefining the role of a pentester.
In this role, you will join one of the most progressive Technology Risk teams in the industry which continues to push the development of risk in preference to security within technology and the business. You will collaborate with technology teams on both in house projects and external cloud adoptions to deliver secure products and solutions.
HOW YOU WILL FULFILL YOUR POTENTIAL
Perform penetration tests and find impactful vulnerabilities in a wide variety of web applications, cloud-based systems, and infrastructure platforms (e.g. banking websites, payment applications, authentication systems, core internal frameworks, critical infrastructure)
Work with teams to recommend ways of addressing vulnerabilities and propose systematic improvements.
Leverage AI tools to focus your efforts on the most creative parts of the security research process.
Grow and share your knowledge with the community of internal pentesters at Goldman Sachs.
SKILLS AND EXPERIENCE WE ARE LOOKING FOR
Experience in penetration testing across the mentioned areas.
Strong understanding of web security topics, ability to build exploit chains and articulate impact of individual findings.
Experience in analysing complex infrastructural systems by code review, server and cloud configuration analysis, reverse engineering and fuzzing.
Experience in using LLM tools in security analysis. Experience in building own AI-assisted tools to get the work done.
Working knowledge of common security tools (Burp Suite, Wireshark, Ghidra, netcat)
Familiarity with one or more languages (Java, Javascript, Python, C++, C#)
Well versed with TCP/IP stack and network protocols
High level knowledge of cryptography concepts
PREFFERED QUALIFICATIONS
Experience in adopting or crafting custom proof of concept exploits
Knowledge of common cloud products and solutions
Bachelor of Science in Computer Science, Cyber-Security, or Information Security is preferred
Experience or trainings in related disciplines e.g. computer security, network security, network device management, IT administration, cloud security, infrastructure pentesting is preferred
Certificates (of equivalent knowledge) like OSCP, OSEP, OSWP
