Penetration Tester / Red team Specialist (f/m/x)

Raiffeisen Bank International AG

Penetration Tester / Red team Specialist (f/m/x)

Unternehmen: Raiffeisen Bank International AG

Standort: Wien, Österreich

Bereich: RBI Group Cyber Defense Services

RBI Group Cyber Defense Services sucht eine*n erfahrene*n Red Team Specialist für eine große und komplexe Enterprise-Umgebung mit mehreren Geschäftseinheiten, Netzwerkbanken und Tochtergesellschaften. Die Rolle kombiniert offensive Security mit Defender Enablement: realistische Angriffspfade werden simuliert, Sicherheitskontrollen validiert und offensive Erkenntnisse in konkrete Verbesserungen für Detection- und Response-Teams übersetzt.

Your mission at RBI

Plan and execute red team and purple team engagements across enterprise, endpoint, identity, network, cloud, and web environments.
Conduct realistic attack-path exercises against Group units and subsidiaries, aligned with approved scope and business context.
Perform offensive activities including privilege escalation, lateral movement, persistence, defense evasion, and identity abuse in enterprise and cloud environments.
Assess internal infrastructure, Active Directory, cloud identity, and web application attack surfaces.
Document attack chains in a defender-centric manner, including techniques used, expected telemetry, detection gaps, and detection engineering recommendations.
Work closely with blue teams, detection engineers, and incident responders to validate controls and improve detection and response coverage.
Translate findings into prioritized remediation guidance, detection use cases, and practical follow-up actions.
Develop or customize offensive tooling, scripts, and test scenarios where required.

Your core competencies

Proven hands-on experience delivering red team, purple team, or advanced penetration testing engagements in large enterprise environments.
Experience in offensive operations beyond tool usage, including privilege escalation, lateral movement, persistence, defense evasion, and identity abuse in enterprise and cloud environments.
Hands-on experience in web application exploitation techniques such as authentication bypass, session abuse, SSRF, deserialization, injection flaws, and OAuth/SAML abuse.
Deep understanding of the internals of at least one operating system, Windows or Linux, authentication mechanisms, service and process relationships, and system telemetry.
Prior knowledge of Active Directory abuse paths and enterprise identity attack techniques.
Understanding of how web attacks manifest in application logs, web logs, WAF telemetry, and identity providers.
Proficiency in at least one scripting language, preferably PowerShell or Python.
Ability to communicate clearly with both technical and non-technical stakeholders.

Nice to have

Experience in Blue Team functions such as Detection Engineering or Incident Response.
Experience building, tuning, or validating detections in SIEM and EDR platforms.
Familiarity with Atomic Red Team, Caldera, or similar adversary simulation frameworks.
Knowledge of Azure AD / Entra ID and cloud identity attack techniques.
Experience in financial services or other regulated industries.
Knowledge of SWIFT security controls and attack surfaces.
Familiarity with TIBER-style or threat-led testing approaches and DORA.
Experience with OT/SCADA environments or banking ATM/POS network security assessments.
Contributions to the offensive security community and relevant offensive security certifications.
German language skills at business level.

What’s in it for you

Flexible hours and work-from-home options from Austria.
Global community with 75+ nationalities, English as company language, and work permit support.
Continuous learning, proactive career development, trainings and use of new technologies.
Subsidized canteen, well-being programs, check-ups and sport allowances.
Discounts, exclusive banking terms and a free public transport pass.
Child allowances, gender-neutral parental leave, bilingual company kindergarten and holiday childcare.
Minimum salary of EUR 3,375.40 gross per month under the applicable Banking Collective Agreement, with actual salary typically higher depending on qualifications and experience.

Raiffeisen Bank International serves more than 17 million customers across Austria and CEE and emphasizes diversity, inclusiveness and equity.

Bewerben

.js-only-skeleton { display: none !important; }

Penetration Tester / Red team Specialist (f/m/x)

Unternehmen: Raiffeisen Bank International AG

Standort: Wien, Österreich

Bereich: RBI Group Cyber Defense Services

Your mission at RBI

Plan and execute red team and purple team engagements across enterprise, endpoint, identity, network, cloud, and web environments.
Conduct realistic attack-path exercises against Group units and subsidiaries, aligned with approved scope and business context.
Perform offensive activities including privilege escalation, lateral movement, persistence, defense evasion, and identity abuse in enterprise and cloud environments.
Assess internal infrastructure, Active Directory, cloud identity, and web application attack surfaces.
Document attack chains in a defender-centric manner, including techniques used, expected telemetry, detection gaps, and detection engineering recommendations.
Work closely with blue teams, detection engineers, and incident responders to validate controls and improve detection and response coverage.
Translate findings into prioritized remediation guidance, detection use cases, and practical follow-up actions.
Develop or customize offensive tooling, scripts, and test scenarios where required.

Your core competencies

Proven hands-on experience delivering red team, purple team, or advanced penetration testing engagements in large enterprise environments.
Experience in offensive operations beyond tool usage, including privilege escalation, lateral movement, persistence, defense evasion, and identity abuse in enterprise and cloud environments.
Hands-on experience in web application exploitation techniques such as authentication bypass, session abuse, SSRF, deserialization, injection flaws, and OAuth/SAML abuse.
Deep understanding of the internals of at least one operating system, Windows or Linux, authentication mechanisms, service and process relationships, and system telemetry.
Prior knowledge of Active Directory abuse paths and enterprise identity attack techniques.
Understanding of how web attacks manifest in application logs, web logs, WAF telemetry, and identity providers.
Proficiency in at least one scripting language, preferably PowerShell or Python.
Ability to communicate clearly with both technical and non-technical stakeholders.

Nice to have

Experience in Blue Team functions such as Detection Engineering or Incident Response.
Experience building, tuning, or validating detections in SIEM and EDR platforms.
Familiarity with Atomic Red Team, Caldera, or similar adversary simulation frameworks.
Knowledge of Azure AD / Entra ID and cloud identity attack techniques.
Experience in financial services or other regulated industries.
Knowledge of SWIFT security controls and attack surfaces.
Familiarity with TIBER-style or threat-led testing approaches and DORA.
Experience with OT/SCADA environments or banking ATM/POS network security assessments.
Contributions to the offensive security community and relevant offensive security certifications.
German language skills at business level.

What’s in it for you

Flexible hours and work-from-home options from Austria.
Global community with 75+ nationalities, English as company language, and work permit support.
Continuous learning, proactive career development, trainings and use of new technologies.
Subsidized canteen, well-being programs, check-ups and sport allowances.
Discounts, exclusive banking terms and a free public transport pass.
Child allowances, gender-neutral parental leave, bilingual company kindergarten and holiday childcare.
Minimum salary of EUR 3,375.40 gross per month under the applicable Banking Collective Agreement, with actual salary typically higher depending on qualifications and experience.

Raiffeisen Bank International serves more than 17 million customers across Austria and CEE and emphasizes diversity, inclusiveness and equity.

Hauptstandort

Random Phone Number
randomemail@example.com

Ansprechpartner

Klicke hier,
um mit der Karte zu interagieren.

Hauptstandort

Raiffeisen Bank International AG

Am Stadtpark 9
1030 Wien
Österreich

www.informatikjobs.at

Raiffeisen Bank International AG

Wien

Die Raiffeisen Bank International AG & RZB-Gruppe beschäftigt alleine im Bereich IT in Wien rund 500 MitarbeiterInnen. IT ist Ihre Disziplin? Wir bieten Ihnen ein breites Aufgabenspektrum: Entwicklung und Betreuung von Bankensoftware, technischer Support der Fachabteilungen, projektübergreifende Tätigkeit im Rahmen von IT- , Security- und Business-Projekten.

Die Raiffeisen Bank International AG (RBI) ist eine vollkonsolidierte Tochter der Raiffeisen Zentralbank Österreich AG (RZB). Die RBI betrachtet Österreich und Zentral- und Osteuropa (CEE) als ihren Heimmarkt. 14 Märkte der Region werden durch Tochterbanken abgedeckt, darüber hinaus umfasst die Gruppe zahlreiche andere Finanzdienstleistungsunternehmen beispielsweise in den Bereichen Leasing, Vermögensverwaltung und Mergers and Acquisitions. Insgesamt betreuen rund 51.000 Mitarbeiter 14,2 Millionen Kunden in rund 2.600 Geschäftsstellen, der überwiegende Teil davon in CEE.

Unsere Firmenkultur gewährleistet, dass für unser geschäftliches und ethisches Verhalten höchste Standards eingehalten werden, die auf den folgenden Wertvorstellungen basieren:

Kundenorientierung
Professionalität
Qualität
Gegenseitiger Respekt
Initiative
Teamwork
Integrität

Eigenschaften, die BewerberInnen mitbringen sollten:

* Analytisches Denken
* Selbständige und strukturierte Arbeitsweise
* Fachliches Interesse
* Freude an der Arbeit im Team

Aufnahmeverfahren:

Interview mit Fachabteilung und Human Resources

Joblink: https://jobs.rbinternational.com/

Unsere Firmenkultur gewährleistet, dass für unser geschäftliches und ethisches Verhalten höchste Standards eingehalten werden, die auf den folgenden Wertvorstellungen basieren:

Kundenorientierung
Professionalität
Qualität
Gegenseitiger Respekt
Initiative
Teamwork
Integrität

Eigenschaften, die BewerberInnen mitbringen sollten:

* Analytisches Denken
* Selbständige und strukturierte Arbeitsweise
* Fachliches Interesse
* Freude an der Arbeit im Team

Aufnahmeverfahren:

Interview mit Fachabteilung und Human Resources

Joblink: https://jobs.rbinternational.com/

Unsere Firmenkultur gewährleistet, dass für unser geschäftliches und ethisches Verhalten höchste Standards eingehalten werden, die auf den folgenden Wertvorstellungen basieren:

Kundenorientierung
Professionalität
Qualität
Gegenseitiger Respekt
Initiative
Teamwork
Integrität

Eigenschaften, die BewerberInnen mitbringen sollten:

* Analytisches Denken
* Selbständige und strukturierte Arbeitsweise
* Fachliches Interesse
* Freude an der Arbeit im Team

Aufnahmeverfahren:

Interview mit Fachabteilung und Human Resources

Joblink: https://jobs.rbinternational.com/

Unsere Firmenkultur gewährleistet, dass für unser geschäftliches und ethisches Verhalten höchste Standards eingehalten werden, die auf den folgenden Wertvorstellungen basieren:

Kundenorientierung
Professionalität
Qualität
Gegenseitiger Respekt
Initiative
Teamwork
Integrität

Eigenschaften, die BewerberInnen mitbringen sollten:

* Analytisches Denken
* Selbständige und strukturierte Arbeitsweise
* Fachliches Interesse
* Freude an der Arbeit im Team

Aufnahmeverfahren:

Interview mit Fachabteilung und Human Resources

Joblink: https://jobs.rbinternational.com/

Unsere Firmenkultur gewährleistet, dass für unser geschäftliches und ethisches Verhalten höchste Standards eingehalten werden, die auf den folgenden Wertvorstellungen basieren: