Specialist Offensive Security Job Vacancy at CRDB Bank PLC – November 2026
Organization: CRDB Bank PLC – Benki ya CRDB
Location: Tanzania Head Office
Category: Administration / Cybersecurity
Job Type: Full-Time
Application Deadline: 22 November 2026
CRDB Bank PLC is inviting applications from qualified and experienced cybersecurity professionals for the position of Specialist Offensive Security at its Tanzania Head Office.
Job Purpose
The Specialist Offensive Security will conduct authorised offensive security assessments to identify exploitable weaknesses in the Bank’s applications, infrastructure, networks and services. The role supports penetration testing, adversary simulation and security validation to enable proactive identification and timely remediation of vulnerabilities, strengthening the Bank’s resilience against real-world cyberattacks.
Key Responsibilities
- Conduct authorised penetration testing across applications, APIs, networks, mobile platforms, infrastructure and other approved environments.
- Identify, validate and demonstrate exploitable security weaknesses and assess their potential business impact.
- Perform approved adversary simulations and support red-team and purple-team exercises.
- Document security assessment findings clearly and provide practical remediation recommendations to system and application owners.
- Retest remediated vulnerabilities to confirm that corrective actions have effectively addressed identified weaknesses.
- Support the development and continuous improvement of offensive security testing methodologies.
- Maintain appropriate evidence and documentation from security assessments.
- Collaborate with Cyber Defence and relevant technology teams to improve preventive and detective security controls using testing outcomes.
- Maintain up-to-date knowledge of emerging attack techniques, vulnerabilities and offensive security practices.
- Ensure all offensive security activities operate within approved scope, rules of engagement and Bank policies.
- Perform other related responsibilities as assigned by Management.
Qualifications and Experience
Applicants must meet the following requirements:
- Bachelor’s degree in Cyber Security, Computer Science, Computer Engineering, Software Engineering or a related academic field.
- Minimum of 3 years’ relevant experience in offensive security, penetration testing, application security or related cybersecurity work.
- Practical experience assessing web applications, APIs, networks, mobile applications or other enterprise technology environments.
Professional Certifications
Applicants should possess relevant industry certifications, such as:
- Certified Ethical Hacker (CEH).
- Offensive Security Certified Professional (OSCP).
- eLearnSecurity Web Application Penetration Tester (eWPT).
- eLearnSecurity Certified Professional Penetration Tester (eCPPT).
- Certified Red Team Professional (CRTP).
- Certified Red Team Operator (CRTO).
- Offensive Security Experienced Penetration Tester (OSEP).
- Offensive Security Web Expert (OSWE).
- Certified Red Team Expert (CRTE).
- eLearnSecurity Certified Penetration Tester eXtreme (eCPTX).
- eLearnSecurity Web Application Penetration Tester eXtreme (eWPTX).
Knowledge and Technical Skills
Candidates should demonstrate knowledge and practical competence in the following areas:
- Penetration testing and vulnerability exploitation methodologies.
- Web application, API, mobile, network and infrastructure security.
- OWASP Top 10 and common cyberattack techniques.
- Windows, Linux, Active Directory and networking fundamentals.
- Offensive security tools, including Burp Suite, Kali Linux and Nmap.
- Cybersecurity standards and secure testing principles.
- Basic scripting and security automation concepts.
Equal Employment Opportunity
CRDB Bank is committed to upholding sustainability and Environmental, Social and Governance (ESG) practices. The Bank promotes an inclusive workplace and encourages applications from women and persons with disabilities.
Important Notice: CRDB Bank does not charge any fees for the application or recruitment process. Applicants should disregard any requests for payment, as these do not represent the Bank’s recruitment practices.
Only shortlisted candidates will be contacted.
How to Apply
Interested candidates should submit their applications online through the official CRDB Bank PLC careers portal.
Application Deadline: 22 November 2026
CLICK HERE TO APPLY