Specialist Offensive Security at CRDB Bank Tanzania

Reporting Line

MANAGER OFFENSIVE SECURITY & VULNERABILITY ASSESSMENTS

Location

Tanzania Head Office

Department

CYBERSECURITY UNIT

Number of openings

1

Job Purpose

Responsible for conducting authorized offensive security assessments to identify exploitable weaknesses in the Bank's applications, infrastructure, networks and services.

The role supports penetration testing, adversary simulation and security validation to enable proactive identification, timely remediation and strengthen the Bank's resilience against real-world cyberattacks.

Principle Responsibilities

• Conduct authorized penetration testing across applications, APIs, networks, mobile platforms, infrastructure and other approved environments.
• Identify, validate and demonstrate exploitable security weaknesses and assess their potential business impact.
• Perform approved adversary simulations and support red-team and purple-team exercises.
• Document findings clearly and provide practical remediation recommendations to system and application owners.
• Retest remediated vulnerabilities to confirm effective closure.
• Support development and continuous improvement of offensive security testing methodologies.
• Maintain appropriate evidence and documentation from security assessments.
• Work with Cyber Defence and relevant technology teams to improve preventive and detective controls using testing outcomes.
• Maintain current knowledge of emerging attack techniques, vulnerabilities and offensive security practices.
• Ensure all offensive security activities operate within approved scope, rules of engagement and Bank policies.
• Perform other related responsibilities assigned by Management.

Qualifications Required

• Bachelor’s degree in cyber security, Computer science, Computer engineering, Software Engineering, or related academic field.
• Minimum 3 years' relevant experience in offensive security, penetration testing, application security or related cybersecurity work.
• Practical experience assessing web applications, APIs, networks, mobile applications or other enterprise technology environments.
• Industry certifications such as CEH, OSCP, eWPT, eCPPT, CRTP, CRTO, OSEP, OSWE, CRTE, eCPTX, or eWPTX.
• Penetration testing and vulnerability exploitation methodologies.
• Web, API, mobile, network and infrastructure security.
• OWASP Top 10 and common attack techniques.
• Windows, Linux, Active Directory and networking fundamentals.
• Offensive security tools such as Burp Suite, Kali Linux and Nmap.
• Cybersecurity standards and secure testing principles.
• Basic scripting and security automation concepts.

CRDB Commitment

CRDB Bank is dedicated to upholding Sustainability and ESG practices and encourage applicants who share this commitment. The Bank also promotes an inclusive workplace, hence applications from women and individual with disabilities are encouraged.

It is important to note that CRDB Bank does not charge any fees for the application or recruitment process, and any requests for payment should be disregarded as they do not represent the bank’s practices.

Only Shortlisted Candidates will be Contacted.

Deadline

2026-11-22

Employment Terms

PERMANENT