Domain Expert III - Security Testing

Werken bij ABN AMRO

Cyber threats are evolving rapidly. Attackers increasingly use automation and AI, regulation raises the bar for security testing, and traditional periodic testing alone is no longer enough. As Domain Expert Security Testing, you lead the development of our security testing capability within our Security Assurance team. You provide functional and technical leadership across penetration testing, red teaming, coordinated vulnerability disclosure and regulatory security testing, including DORA/TLPT.

Jouw rol en impact

Your goal is simple: make sure we continuously challenge our security and know whether our defences actually work. You will be part of the Security Assurance team within the Corporate Information Security Office (CISO) of ABN AMRO in the Netherlands. Security Testing brings together specialists with deep expertise in offensive security. The environment is highly technical, but the impact goes beyond individual tests. Our ambition is to move from predominantly periodic security testing towards a more continuous model of exposure validation.

Wat wij bieden

We believe it is important to be a good employer. Joining us means stepping into a role with impact, supported by excellent employment conditions that foster your job satisfaction, development, and wellbeing. You will receive an attractive gross monthly salary based on a 36-hour work week, including holiday allowance and a flexible benefit budget, an excellent pension scheme, and flexibility in working from home with an ergonomic home office setup. Additionally, you get plenty of room for relaxation with five weeks of vacation per year, five 'Banking for better days', a development budget of €1,000 per year, and an annual public transport pass for free public transportation throughout the Netherlands.

Solliciteer nu via de knop om deze uitdagende rol aan te gaan!

Belangrijkste verantwoordelijkheden

• Lead the further development of penetration testing, red teaming and coordinated vulnerability disclosure capabilities.

• Drive security testing focused on the exposures that matter most.

• Provide expert direction for complex and high-impact security testing engagements.

• Drive the integration of Security Testing and exposure validation into CTEM.

• Explore and implement opportunities for continuous, automated and AI-assisted security testing.

• Raise the technical bar by challenging, coaching and connecting security specialists.

• Ensure regulatory requirements such as DORA/TLPT are translated into effective testing capabilities.

• Improve methodologies, standards, tooling and ways of working.

• Challenge and guide external security testing partners.

• Translate technical outcomes into actionable insights for our stakeholders.

• Identify capability gaps and turn them into concrete improvements.

Vereisten

• Have extensive experience in penetration testing, red teaming, coordinated vulnerability disclosure or another offensive security discipline.

• Understand modern attack techniques across applications, infrastructure, cloud and identity environments.

• Can think beyond individual vulnerabilities and reason about attack paths and real-world exploitability.

• Have experience developing security testing methodologies or capabilities.

• Can provide technical leadership without needing to be the person performing every test yourself.

• Are comfortable challenging experienced specialists and senior stakeholders.

• Understand how automation and AI are changing both offensive security and security testing.

• Can translate complex technical subjects into clear decisions and priorities.

Secundaire arbeidsvoorwaarden

• Extra beloning (bijv. 13e maand, vaste eindejaarsuitkering)
• Prestatiegebonden beloning
• Pensioen
• Reiskostenvergoeding