IT Security Penetration Tester

Das ist der Job

Behind our maxim are also charitable and educational activities.

Darum lohnt es sich

Work model: remote or hybrid from Gdynia / Gdańsk / Warsaw / Lodz Why choose this offer? • You can expect a flexible work organization • The international work environment will give you the opportunity to interact with the English language on a daily basis • Scandinavian organizational culture will provide you with work-life balance, you will gain time for additional training (financed by Jit) • The Jit community will bring you a nice time duringregular integration meetings Project We are looking for an experienced IT Security Penetration Tester to join a strategic financial services initiative.

The position involves close collaboration with architecture, engineering, and security teams to ensure security risks are identified and addressed throughout the solution lifecycle.

Responsibilities you'll have • Conduct threat modeling workshops with application and platform teams • Perform application-level security assessments focused on AI-enabled systems, ML solutions, LLM-based applications, and related services • Identify assets, trust boundaries, attack surfaces, threat actors, abuse cases, threats, and security risks related to Mythos scenarios • Map relevant Mythos threat scenarios to business and technical architectures • Develop, maintain, and continuously improve threat models using approved threat modeling methodologies and tooling • Review solution designs, architecture documentation, and technical specifications to validate threat coverage • Collaborate with development, architecture, and security teams to define mitigation actions and security requirements • Assess security exposures and recommend appropriate controls and remediation strategies • Develop reusable threat models, threat libraries, and security patterns • Track, document, and report identified threats, risks, mitigations, and remediation status • Support security governance activities and contribute to secure-by-design initiatives Expected competences and knowledge • Strong knowledge of IT Security Architecture • Hands-on experience with Threat Modeling for AI agents, Machine Learning systems,, and Large Language Models (LLMs) • Deep understanding of AI-specific attack vectors and threat landscapes • Practical experience with threat modeling methodologies such as: STRIDE,Attack Trees,Cyber Kill Chains • Experience creating and maintaining reusable threat models and threat libraries • Ability to map threats to security controls, security requirements, and remediation actions • Experience conducting threat modeling workshops with cross-functional teams Nice-to-have • Experience working within financial services or highly regulated environments • Ability to translate technical threats into business risks and communicate them to non-technical stakeholders • Knowledge of OWASP Top 10 for Large Language Model Applications (OWASP LLM Top 10) • Knowledge of MITRE ATLAS • Familiarity with secure AI development practices and AI governance frameworks Technologies you'll work with • AI Agents • Threat Modeling Tools • Mythos Adversary Framework • OWASP LLM Top 10 • MITRE ATLAS • Security Architecture Frameworks Client – why choose this particular client from the Jit portfolio?

Jit Team has had an over-decade-long relationship with the leading financial group in the Nordic countries, and we are privileged to be our client's premier partner in Poland.

At present, over 200 Jit personnel are engaged in the completion of more than 60 projects for this Norwegian major provider of financial services with a global presence and a strong focus on modern technology. Furthermore, all projects are executed in international teams, giving constant exposure to the English language.

About Jit Team The Human Factor of IT - it’s not just a slogan, it’s a philosophy. The foundation of Jit Team is people, which is why we prioritise you. We employ over 770 experienced experts , to whom we offer developmental projects, a wide range of benefits, and a proprietary professional development programme.

Together with clients from around the world, we create innovative IT solutions delivered by highly specialised and efficient teams. The role requires a Subject Matter Expert (SME) with strong expertise in AI-related threats, AI-enabled applications, and the Mythos Level Adversary Framework.

You will be responsible for conducting application-level security assessments, identifying and analyzing potential threat scenarios, and mapping relevant Mythos threats to evaluate security exposures and support the implementation of effective mitigation strategies.

Please note: This position requires availability of approximately 8 hours per week and is offered as a part-time engagement. Our customer's work atmosphere is epitomized by the Scandinavian culture, which is conducive to people who place emphasis on work-life balance and feedback culture.

We support schools, universities, and educational institutions by conducting workshops, running educational projects, sponsoring events, and donating learning equipment. We offer internships that help launch careers in IT. We support water rescuers and hospitals by providing the necessary equipment.

We also support numerous charitable organisations helping people in need, children, and the elderly. We are a Polish company and we share what we have achieved over more than 15 years of activity. By supporting local initiatives, we contribute to the circulation of good energy.