POSITION DESCRIPTION
This role is responsible for safeguarding the organization's information systems by identifying and mitigating security vulnerabilities. This role involves executing and performing penetration tests and security assessments to uncover potential security weaknesses and another task assigned.
DUTY & RESPONSIBILITY
- Support senior team members in conducting penetration tests on web applications, mobile applications, and network infrastructure (internal and external).
- Use automated scanning tools (like Nessus, OpenVAS, or Nmap) to identify known vulnerabilities and perform initial analysis.
- Stay current with the latest cybersecurity threats, attack vectors, and vulnerabilities (e.g., OWASP Top 10).
- Work with IT and development teams to explain findings and validate that vulnerabilities have been successfully remediated.
- Stay current with the latest cybersecurity threats, attack vectors, and vulnerabilities (e.g., OWASP Top 10).
- Learn and apply standard testing methodologies (e.g., PTES, OSSTMM) under supervision.
- Working with other Senior, Application Security and stakeholder to ensure the tasks are performed within timeline and proper process.
- Providing support for any project reporting to management. Supporting and providing required info for any audit activities.
- Comply with all applicable regulations, rules, codes, guidelines and
- standards set by regulators and the Bank, and carry out duties with high integrity.
- Adhere to all established risk control guidelines, procedures and measures to identify, assess, report, mitigate and monitor the risks involved in the day-to-day work.
QUALIFICATION
- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field (or equivalent practical experience).
- Basic knowledge of web application architecture and common vulnerabilities (e.g., SQL Injection, XSS, CSRF).
- Basic experience with a scripting language (e.g., Python, Bash, or PowerShell).
- Hands-on experience with security tools from school projects, home labs, or internships.
- Strong analytical and problem-solving skills.
- Excellent written and verbal communication skills (for report writing).
- A high degree of curiosity, persistence, and a passion for learning.
- Ethical and professional integrity.
- Certifications: Possession of or progress toward entry-level security certifications like CompTlA PenTest+, eJPT (eLearnSecurity Junior Penetration Tester), or CEH (Certified Ethical Hacker).
- Active participation in Capture The Flag (CTF) competitions or platforms (e.g., TryHackMe, Hack The Box).
- Experience with a personal home lab for security research.
- Any prior internship or experience in an IT or security-related role.
How to apply
Interested and qualified applicants should submit your updated Cover Letter and CV stating the position applied for with your current photo (4x6) through hr@canadiabank.com.kh
