IT Security Penetration Tester

Why choose this offer?

• Flexible work organization
• International work environment with daily English-language interaction
• Scandinavian organizational culture supporting work-life balance
• Time for additional training financed by Jit
• Regular integration meetings

Project

We are looking for an experienced IT Security Penetration Tester to join a strategic financial services initiative. The role requires a Subject Matter Expert (SME) with strong expertise in AI-related threats, AI-enabled applications, and the Mythos Level Adversary Framework.

You will conduct application-level security assessments, identify and analyze potential threat scenarios, and map relevant Mythos threats to evaluate security exposures and support effective mitigation strategies. The position involves close collaboration with architecture, engineering, and security teams to ensure security risks are identified and addressed throughout the solution lifecycle.

This is a part-time engagement requiring availability of approximately 8 hours per week.

Responsibilities

• Conduct threat modeling workshops with application and platform teams
• Perform application-level security assessments focused on AI-enabled systems, ML solutions, LLM-based applications, and related services
• Identify assets, trust boundaries, attack surfaces, threat actors, abuse cases, threats, and security risks related to Mythos scenarios
• Map relevant Mythos threat scenarios to business and technical architectures
• Develop, maintain, and continuously improve threat models using approved threat modeling methodologies and tooling
• Review solution designs, architecture documentation, and technical specifications to validate threat coverage
• Collaborate with development, architecture, and security teams to define mitigation actions and security requirements
• Assess security exposures and recommend appropriate controls and remediation strategies
• Develop reusable threat models, threat libraries, and security patterns
• Track, document, and report identified threats, risks, mitigations, and remediation status
• Support security governance activities and contribute to secure-by-design initiatives

Expected competences and knowledge

• Strong knowledge of IT Security Architecture
• Hands-on experience with Threat Modeling for AI agents, Machine Learning systems, and Large Language Models (LLMs)
• Deep understanding of AI-specific attack vectors and threat landscapes
• Practical experience with threat modeling methodologies such as STRIDE, Attack Trees, and Cyber Kill Chains
• Experience creating and maintaining reusable threat models and threat libraries
• Ability to map threats to security controls, security requirements, and remediation actions
• Experience conducting threat modeling workshops with cross-functional teams
• Fluent English

Nice-to-have

• Experience working within financial services or highly regulated environments
• Ability to translate technical threats into business risks and communicate them to non-technical stakeholders
• Knowledge of OWASP Top 10 for Large Language Model Applications (OWASP LLM Top 10)
• Knowledge of MITRE ATLAS
• Familiarity with secure AI development practices and AI governance frameworks

Technologies you'll work with

• AI Agents
• Large Language Models (LLMs)
• Machine Learning Platforms
• Threat Modeling Tools
• Mythos Adversary Framework
• OWASP LLM Top 10
• MITRE ATLAS
• Security Architecture Frameworks