Background

CRDB Bank PLC – Benki ya CRDB is hiring for the position of Specialist Offensive Security in Tanzania Head Office. The closing date for applications is 22 November 2026.

Job Purpose

Responsible for conducting authorized offensive security assessments to identify exploitable weaknesses in the Bank’s applications, infrastructure, networks and services.

The role supports penetration testing, adversary simulation and security validation to enable proactive identification, timely remediation and strengthen the Bank’s resilience against real-world cyberattacks.

Principal Responsibilities

• Conduct authorized penetration testing across applications, APIs, networks, mobile platforms, infrastructure and other approved environments.
• Identify, validate and demonstrate exploitable security weaknesses and assess their potential business impact.
• Perform approved adversary simulations and support red-team and purple-team exercises.
• Document findings clearly and provide practical remediation recommendations to system and application owners.
• Retest remediated vulnerabilities to confirm effective closure.
• Support development and continuous improvement of offensive security testing methodologies.
• Maintain appropriate evidence and documentation from security assessments.
• Work with Cyber Defence and relevant technology teams to improve preventive and detective controls using testing outcomes.
• Maintain current knowledge of emerging attack techniques, vulnerabilities and offensive security practices.
• Ensure all offensive security activities operate within approved scope, rules of engagement and Bank policies.
• Perform other related responsibilities assigned by Management.

Qualifications Required

• Bachelor’s degree in cyber security, Computer science, Computer engineering, Software Engineering, or related academic field.
• Minimum 3 years’ relevant experience in offensive security, penetration testing, application security or related cybersecurity work.
• Practical experience assessing web applications, APIs, networks, mobile applications or other enterprise technology environments.
• Industry certifications such as CEH, OSCP, eWPT, eCPPT, CRTP, CRTO, OSEP, OSWE, CRTE, eCPTX, or eWPTX.
• Penetration testing and vulnerability exploitation methodologies.
• Web, API, mobile, network and infrastructure security.
• OWASP Top 10 and common attack techniques.
• Windows, Linux, Active Directory and networking fundamentals.
• Offensive security tools such as Burp Suite, Kali Linux and Nmap.
• Cybersecurity standards and secure testing principles.
• Basic scripting and security automation concepts.

Additional Notes

CRDB Bank is dedicated to upholding Sustainability and ESG practices and encourage applicants who share this commitment. The Bank also promotes an inclusive workplace, hence applications from women and individual with disabilities are encouraged.

It is important to note that CRDB Bank does not charge any fees for the application or recruitment process, and any requests for payment should be disregarded as they do not represent the bank’s practices.

Only Shortlisted Candidates will be Contacted.

• Conduct authorized penetration testing across applications, APIs, networks, mobile platforms, infrastructure and other approved environments.
• Identify, validate and demonstrate exploitable security weaknesses and assess their potential business impact.
• Perform approved adversary simulations and support red-team and purple-team exercises.
• Document findings clearly and provide practical remediation recommendations to system and application owners.
• Retest remediated vulnerabilities to confirm effective closure.
• Support development and continuous improvement of offensive security testing methodologies.
• Maintain appropriate evidence and documentation from security assessments.
• Work with Cyber Defence and relevant technology teams to improve preventive and detective controls using testing outcomes.
• Maintain current knowledge of emerging attack techniques, vulnerabilities and offensive security practices.
• Ensure all offensive security activities operate within approved scope, rules of engagement and Bank policies.
• Perform other related responsibilities assigned by Management.

• Penetration testing and vulnerability exploitation methodologies.
• Web, API, mobile, network and infrastructure security.
• OWASP Top 10 and common attack techniques.
• Windows, Linux, Active Directory and networking fundamentals.
• Offensive security tools such as Burp Suite, Kali Linux and Nmap.
• Cybersecurity standards and secure testing principles.
• Basic scripting and security automation concepts.

• Bachelor’s degree in cyber security, Computer science, Computer engineering, Software Engineering, or related academic field.
• Minimum 3 years’ relevant experience in offensive security, penetration testing, application security or related cybersecurity work.
• Practical experience assessing web applications, APIs, networks, mobile applications or other enterprise technology environments.
• Industry certifications such as CEH, OSCP, eWPT, eCPPT, CRTP, CRTO, OSEP, OSWE, CRTE, eCPTX, or eWPTX.