Domain Expert III - Security Testing

Details

As Domain Expert Security Testing, you provide functional and technical leadership for ABN AMRO's Security Testing domain within the Security Assurance team. You lead the development of capabilities across penetration testing, red teaming, coordinated vulnerability disclosure, and regulatory security testing, including DORA/TLPT. You help the bank continuously validate its security and understand whether its defences work against evolving cyber threats.

Responsibilities

• Lead the further development of penetration testing, red teaming, and coordinated vulnerability disclosure capabilities.
• Drive security testing focused on the exposures that matter most.
• Provide expert direction for complex and high-impact security testing engagements.
• Integrate security testing and exposure validation into Continuous Threat Exposure Management (CTEM).
• Explore and implement continuous, automated, and AI-assisted security testing.
• Challenge, coach, and connect security specialists.
• Translate regulatory requirements such as DORA/TLPT into effective testing capabilities.
• Improve methodologies, standards, tooling, and ways of working.
• Guide external security testing partners.
• Translate technical outcomes into actionable insights for stakeholders.
• Identify capability gaps and turn them into concrete improvements.

Working Environment

You will work in the Security Assurance team within the Corporate Information Security Office (CISO) of ABN AMRO in the Netherlands. The team identifies, understands, and validates cyber exposure across the bank. You will work closely with the Product Owner and Expert Lead while owning the functional and technical direction of Security Testing.

Requirements

• Extensive experience in penetration testing, red teaming, coordinated vulnerability disclosure, or another offensive security discipline.
• Understanding of modern attack techniques across applications, infrastructure, cloud, and identity environments.
• Ability to reason about attack paths and real-world exploitability beyond individual vulnerabilities.
• Experience developing security testing methodologies or capabilities.
• Ability to provide technical leadership without performing every test personally.
• Confidence challenging experienced specialists and senior stakeholders.
• Understanding of how automation and AI are changing offensive security and security testing.
• Ability to translate complex technical subjects into clear decisions and priorities.
• Understanding of regulatory security testing and experience with DORA/TLPT are advantageous.
• Experience with product ownership in an agile working environment and complex IT environments is advantageous.

Benefits

• Gross monthly salary of €7,048–€10,068 based on a 36-hour work week, including holiday allowance and a flexible benefit budget.
• Excellent pension scheme.
• Flexible working, including working from home in consultation with the team and an ergonomic home office setup.
• Five weeks of vacation, two mandatory days off, and the option to purchase up to four additional weeks annually.
• Five additional days off for personal development or volunteer work.
• Development budget of €1,000 per year, accumulating up to €3,000.
• Annual public transport pass with free public transportation throughout the Netherlands for business and private use.