Senior Penetration Test Analyst

About the role

Join the Offensive Security team at Commerzbank’s Digital Technology Center in Sofia and help protect the bank’s digital transformation. As a Senior Penetration Test Analyst you will lead technical assessments, uncover vulnerabilities, and guide remediation across a range of systems.

Key responsibilities

• Plan, execute and document comprehensive penetration tests, including scoping and reporting.
• Communicate findings and recommendations to both technical teams and senior management.
• Perform information gathering, analysis and exploitation to identify security weaknesses.
• Produce detailed vulnerability reports with actionable remediation advice.
• Share knowledge and best practices within the security team.

Required profile

• Proven experience in penetration testing and use of relevant tools.
• Hands‑on experience testing web and mobile applications.
• Familiarity with OWASP Top 10 and the MITRE ATT&CK framework.
• Strong understanding of operating systems, networking, Active Directory and authentication technologies.
• Background in security consulting and basic automation of security tests.
• Fluent English (written and spoken) and a university degree in IT or a related field.

Required skills

• Penetration testing
• Web application testing
• Mobile application testing
• OWASP Top 10
• MITRE ATT&CK framework
• Operating systems
• Networking
• Active Directory
• Authentication technologies
• Security consulting
• Security test automation

What we offer

• 25 + days paid leave (increasing up to 31 days), flexible hours and remote‑work options.
• Comprehensive health and dental insurance package.
• Monthly food vouchers of €80.
• Additional days off for exceptional circumstances and employee assistance programs.
• Multisport card and child‑care contribution.
• Support for training, certifications and conference attendance.
• Career growth in a stable, 150‑year‑old organization with a multicultural environment.