Company
DK Bank is a leading Bhutanese financial institution and the official bank of Gelephu Mindfulness City, redefining banking for the digital age while expanding its global presence.
Role
You'll help build our internal security capability across digital banking, payments, core banking, internal infrastructure, and partner-facing APIs.
Your primary focus will be endpoint security, hands-on security testing, vulnerability management, and coordination with external security vendors.
What you'll do
- Own endpoint security across employee devices and servers, including EDR/XDR, hardening, and privileged access
- Perform internal penetration testing across applications, APIs, cloud infrastructure, and internal systems
- Validate vulnerabilities and drive remediation with engineering teams
- Coordinate external penetration tests, security assessments, and vendors
- Own vulnerability tracking and remediation follow-through
- Support targeted security reviews, incident response, and security automation
What you bring
- Strong hands-on experience in penetration testing, offensive security, or security engineering
- Experience with endpoint security and EDR/XDR platforms such as CrowdStrike or Microsoft Defender
- Strong understanding of Linux, Windows/macOS, networking, authentication, and common attack techniques
- Experience testing web applications and APIs
- Familiarity with AWS, IAM, Kubernetes, and cloud infrastructure
- Scripting skills in Python, Go, Bash, or similar
- Comfortable working independently and building security processes from the ground up
What we offer
- Competitive compensation from a sovereign-backed fintech
- Real security ownership across a national bank's entire stack
- A dynamic, passionate team and a conducive work environment