Rabitabank OJSC

Penetration tester in cybersecurity

In short

Junior Penetration Tester role in the Cybersecurity Division of Rabitabank's IT Security Department, conducting penetration tests on networks, web applications, APIs, and mobile apps, plus phishing simulations and red teaming. Based onsite in Baku at a major bank, this entry-level position requires basic knowledge of web vulnerabilities, Burp Suite, Nmap, and networking/OS fundamentals, with strong analytical and documentation skills. Bug bounty, CTF, or certification experience (eJPT, CPTS, OSCP) is a plus but not required.

About the Role
"Rabitabank" OJSC announces recruitment for the position of Junior Penetration Tester in the Cybersecurity Division of the IT Security Department. As one of the country's largest banks, "Rabitabank" OJSC offers you the opportunity to build a successful career and achieve personal development within a professional team. Rabitabank is looking for people who are eager to learn, positive, and creative in their approach to work.
Responsibilities
•Conduct penetration tests of networks, web applications, APIs, and mobile applications with the support of the team.
•Participate in phishing simulations and red teaming tests.
•Verify identified vulnerabilities and investigate their causes and possible impacts.
•Prepare reports on test results and recommendations for remediating vulnerabilities.
•Re-test vulnerabilities after fixes.
Requirements
•Basic knowledge of how web applications work and common security vulnerabilities.
•Basic hands-on experience with Burp Suite, Nmap, and similar tools.
•Basic knowledge of Windows and Linux operating systems.
•Knowledge of how networks work and of the main protocols (TCP/IP, DNS, HTTP/HTTPS).
•Strong analytical thinking and problem-solving skills.
•Willingness to conduct independent research and learn new things.
•Ability to clearly explain and document technical findings.
•Ability to read and understand technical materials in English.
Nice to Have
•Experience participating in bug bounty programs.
•Participation in CTF competitions, and practical work on Hack The Box, TryHackMe, and similar platforms.
•Technical articles on cybersecurity projects or research conducted.
•Ability to write simple scripts in Python, Bash, or PowerShell.
•Knowledge of mobile application security or Active Directory environments.
•eJPT, CPTS, OSCP, and other relevant certifications.
•Practical experience gained in labs, projects, research, and bug bounty programs will be taken into consideration.
•More than the number of certifications or tools used, the candidate's analytical thinking, how they investigate a problem, verify a finding, and explain their conclusions is valued.
Conditions
No conditions specified in the posting.

Stop applying.
Get referred.

$10 in free credits

In just 60 seconds, fully on autopilot — Eraldt's AI agents read your CV, map the roles you fit, find live vacancies and the people who can refer you, write personal emails, and get you referred.

This isn't an application: your CV doesn't go to the company, and we don't promise a referral for this exact role.

Discover who else lands interviews on autopilot