Officer, Vulnerability Assessment & Penetration Testing at Stanbic IBTC Bank

Stanbic IBTC Bank is a leading African banking group focused on emerging markets globally. It has been a mainstay of South Africa's financial system for 150 years, and now spans 16 countries across the African continent.

Standard Bank is a firm believer in technical innovation, to help us guarantee exceptional client service and leading edge financial solutions. Our growing global success reflects our commitment to the latest solutions, the best people, and a uniquely flexible and vibrant working culture. To help us drive our success into the future, we are looking for resourceful individuals to join our dedicated team at our offices.

We are recruiting to fill the position below:

Job Title: Officer, Vulnerability Assessment & Penetration Testing

Job Ref ID: 80450957A-0001
Location: Walter Carrington Crescent, Lagos
Job Type: Full-time
Business Segment: Personal & Private Banking

Job Description

• Responsible for simulating cyber-attacks to identify and exploit vulnerabilities within the organization's IT infrastructure, applications, and networks.
• This role focuses on offensive security techniques to test the effectiveness of security controls and improve the organization's overall security posture.
• Conduct thorough penetration tests on systems, networks, and applications to identify security weaknesses.
• Use a combination of automated tools and manual testing techniques to exploit vulnerabilities.
• Plan and execute red team exercises to test the organization's detection and response mechanisms.
• Use advanced attack techniques to emulate adversaries and assess the organization's security readiness.
• Perform vulnerability assessments to identify and prioritize security risks.
• Analyze assessment results and provide actionable remediation recommendations.
• Prepare detailed reports of findings from penetration tests and red team exercises, including technical details and potential business impacts.
• Present findings to technical and non-technical stakeholders, providing clear explanations and recommendations for remediation.

Qualifications

• Bachelor’s Degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Relevant certifications such as Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), GIAC Certified Incident Handler (GCIH), or equivalent can be an added advantage.

Experience:

• 3 years experience in cybersecurity, with a focus on red team activities, vulnerability assessment, and penetration testing. Hands-on experience with VAPT tools such as Nessus, Burp Suite, Metasploit, and OWASP ZAP.
• 3years extensive knowledge of Security Operation, Endpoint management, Network Security and Vulnerability management.
• Extensive knowledge of TCP/IP protocol stacks, firewalls (Checkpoint and ASA), switches and routers. Extensive knowledge of Windows and Linux Operating Systems and cloud computing / cloud security.

Additional Information:
Behavioural Competencies:

• Adopting Practical Approaches
• Articulating Information
• Developing Strategies
• Embracing Change
• Exploring Possibilities
• Providing Insights
• Team Working

Technical Competencies:

• Data Analysis
• Debugging and Fixing Software
• Design Patterns
• Software Development Life Cycle (SDLC) methodologies & Tools
• Systems Patterns Integration
• Technical Analysis
• Use of Build and Test Automation
• Write Code

Application Closing Date
Not Specified.

How to Apply
Interested and qualified candidates should:
Click here to apply online