Cyber Security Engineer (Penetration Testing)
About Mox
Mox is built by and for the ones who aspire to live life to the fullest – we call them Generation Mox! The name Mox reflects the endless opportunities we can create, - Mobile eXperience; Money eXperience; Money X (multiplier), eXponential growth, eXploration… it’s all up for us to define together.
Why Mox
Mox helps you grow – your money, your world, your possibilities. We equip you with the financial management tools, information and insights you need to make your dreams, big or small, come true. Everything at Mox – from our products, features, to rewards – is designed based on customer research, tailor made for your needs. We care about what customers care about, especially in data security and privacy. Data ethics is core to everyone here at Mox.
Mox rewards you with an array of banking and lifestyle benefits.
What we are looking for?
We are looking for a Penetration Tester. You will provide hands-on cyber security expertise to ensure the confidentiality, integrity, and availability of systems. This role reports to the Cyber Security Engineering Lead, Technology Department for Mox Bank. The nature of the role involves specific engagement with: Internal and External Business Entities, Technology, Line 2 Risk, Compliance, Internal Audit & Operations, 3rd Party Technology Suppliers.
Responsibilities
- Conduct hands-on penetration testing and vulnerability assessments on mobile (iOS and Android) and web applications, APIs, and cloud infrastructure.
- Review Infrastructure as Code (IaC) and application source code to identify potential security gaps and provide recommendations to relevant stakeholders.
- Prepare detailed and high-quality security reports on identified vulnerabilities, and provide clear remediation steps.
- Proactively collaborate with multiple stakeholders throughout the organization to ensure that security best practices are incorporated into the earliest stages.
- Assist stakeholders in remediation efforts, and provide guidance and support as necessary.
- Deliver technical security education and awareness workshops to technology stakeholders.
- Assist in the enhancement and fine-tuning of Mox's security tools and solutions.
- Your work will be critical in ensuring that Mox Bank maintains a strong and robust security posture, protecting against cyber threats and ensuring the safety and security of our customers' data.
Requirements
- 3+ Years’ experience in IT security related positions with a primary focus on penetration testing, application security, and vulnerability assessments. You should be able to demonstrate:
- Passion for offensive security and assurance.
- Deep understanding of penetration testing methodologies, vulnerability identification, and software security principles.
- Ability to act calmly and competently in high-pressure, high-stress situations.
- Must be a critical thinker, with strong problem-solving and analytical skills.
- Excellent time management skills and ability to manage multiple projects under strict timelines.
- Ability to contribute in a team environment.
- Experience performing AWS security configuration reviews is highly desirable.
- Experience with working with Infrastructure as Code and Cloud Compliance are highly desirable.
- Development and automation experience in one or more programming languages are highly desired
Your experience is ideally supported by one or more of the following qualifications:
- Industry-recognised certifications in penetration testing (OSCP, OSWE, CREST CCT / CRT, GWAPT, GPEN, etc.)
- Desirable industry recognised certifications in Cyber Security (CISSP, CISM, SSCP, etc)
- Participation in relevant Cyber Security industry forums is desirable.
To be eligible for internal referrals at Mox Bank, you must be referred by a full time permanent employee of Mox Bank.