.
Crowd Sourced Security Testing Analyst
  • Kraków
Crowd Sourced Security Testing Analyst
Kraków, Kraków, Lesser Poland Voivodeship, Polska
HSBC Service Delivery (Polska) Sp. z o.o.
27. 1. 2026
Informacje o stanowisku

Crowd Sourced Security Testing Analyst

Miejsce pracy: Kraków

Technologies we use

Expected

  • iOS
  • Android

About the project

If you’re looking for a career that will help you stand out, join HSBC, and fulfil your potential. Whether you want a career that could take you to the top, or simply take you in an exciting new direction, HSBC offers opportunities, support and rewards that will take you further.

This job role is directly responsible for handling the day-to-day operations of the HSBC Bug Bounty Program. As part of this role, you will act as the escalation point of contact for any incoming security vulnerabilities received through the Bug Bounty Program and are expected to be an experienced pentester.

Your responsibilities

  • Analyzing, assessing and responding to the security vulnerabilities received as part of Bug Bounty Program.
  • Researching and reproducing the security vulnerabilities.
  • Performing the root cause analysis of the security vulnerabilities.
  • Effectively communicating with the external security researchers.
  • Working closely with the appropriate stakeholders across departments to help them understand the risks, and the track remediation.
  • Driving improvements including tooling, automation, and setting up processes.
  • Help drive the maturity of Bug Bounty Program by continuously improving quality of our services and removing inefficiencies, in line with wider Cybersecurity strategy.
  • Advise on vulnerability remediation, control implementation and secure development practices.

Our requirements

  • At least 4 years of prior demonstrable hands-on experience in penetration testing.
  • Solid understanding of the platform security models for iOS and Android platforms.
  • Excellent understanding of platform-specific security risks, common vulnerabilities for mobile applications, common risks in financial applications.
  • Practical knowledge of penetration testing of widely understood infrastructure, web and mobile technologies, using manual and automated testing methods.
  • Excellent TCP/IP knowledge and understanding of security implications/issues.
  • Strong web application testing experience.
  • Proven programming/scripting skills.
  • Strong understanding of applied use of cryptography in application development.

What we offer

  • Competitive salary
  • Annual performance-based bonus
  • Additional bonuses for recognition awards
  • Multisport card
  • Private medical care
  • Life insurance
  • One-time reimbursement of home office set-up (up to 800 PLN)
  • Corporate parties & events
  • CSR initiatives
  • Nursery discounts
  • Financial support with trainings and education
  • Social fund
  • Flexible working hours
  • Free parking

Benefits

  • sharing the costs of sports activities
  • private medical care
  • sharing the costs of professional training & courses
  • life insurance
  • remote work opportunities
  • flexible working time
  • integration events
  • corporate sports team
  • retirement pension plan
  • corporate library
  • no dress code
  • coffee / tea
  • parking space for employees
  • leisure zone
  • extra social benefits
  • employee referral program
  • opportunity to obtain permits and licenses
  • charity initiatives
  • family picnics
  • extra leave
  • In-office gym

Recruitment stages

  • Online assessment
  • Phone interview
  • Job interview
  • Welcome to HSBC!

HSBC Service Delivery (Polska) Sp. z o.o.

HSBC is one of the world’s largest banking and financial services organisations. Our global businesses serve more than 40 million customers worldwide through a network that covers 63 countries and territories.

HSBC Service Delivery (Polska) Sp. z o.o. is HSBCs global finance, operations, risk and technology centre. We use our unique expertise and capabilities to provide specialised services – our people range from technologists transforming the banking experience to operations professionals managing 1.7 trillion payments a year.

Our Purpose – Opening up a world of opportunity – explains why we exist. We are bringing together the people, ideas and capital that nurture progress and growth, helping to create a better world – for our customers, our people, our investors, our communities and the planet we all share.

Thank you for interest in HSBC.
.
Before you apply, please note that we will take into the consideration only applications that include the following statement:
.
“I hereby declare that I have familiarised myself with the Privacy Statement for Applicants published at http://www.about.hsbc.pl/careers and I give my consent to use my personal data included in my application for the purposes of recruitment in HSBC Service Delivery (Polska) Sp. z o. o. according to the rules described in the Privacy Statement for Applicants, as per the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).”
.
Due to the high number of applications, we reserve the right to contact selected candidates only.
.
In case you would like to resign from participation in the recruitment process or withdraw previously sent application, please email us at: krakow.recruitment@hsbc.com.

  • Praca Kraków
  • Chief security officer Kraków
  • Kraków - Oferty pracy w okolicznych lokalizacjach


    107 579
    15 872