Senior Security Engineer - Penetration Tester

The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.

Need Help?

If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response).

Regular or Temporary:

Regular

Language Fluency:
English (Required)

Work Shift:

1st shift (United States of America)

Please review the following job description:

This is not a role for someone looking to sit on the sidelines.

We're looking for builders, problem-solvers, and security professionals who thrive in a fast-paced environment where priorities shift, new challenges emerge daily, and your skills directly influence the security posture of a major enterprise. If you enjoy finding vulnerabilities before adversaries do, proposing better ways to test, helping shape new security capabilities, and working alongside a high-performing team that continuously raises the bar, we want to hear from you.

Our team tests a wide variety of technologies including AI, Mainframe, Active Directory, APIs, Web Applications, Infrastructure, Mobile, IoT, Cloud Platforms, Thick Client Applications, Physical Security, and others. We are specifically seeking candidates with experience in AI security testing and/or Mainframe security testing. Expertise in additional testing disciplines is highly valued but not required.

This team operates like a championship organization. The work is meaningful, visible, and impactful. You'll have the opportunity to influence testing methodologies, shape emerging security capabilities, and help protect critical business operations. The pace is demanding, the expectations are high, and the opportunity for growth is significant.

For this opportunity, Truist will not sponsor an applicant for work visa status or employment authorization, nor will we offer any immigration-related support for this position (including, but not limited to H-1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN-1 or TN-2, E-3, O-1, or future sponsorship for U.S. lawful permanent residence status.)

ESSENTIAL DUTIES AND RESPONSIBILITIES

The following represents the primary responsibilities for this position. Additional duties may be assigned based on business needs and individual expertise.

Penetration Testing

* Conduct penetration tests against enterprise applications, infrastructure, cloud platforms, AI systems, APIs, mobile applications, Active Directory environments, and other technology assets.

* Simulate real-world attack techniques to identify vulnerabilities, attack paths, misconfigurations, and security weaknesses.

* Perform validation and retesting activities to verify remediation efforts and confirm risk reduction.

* Document technical findings with clear reproduction steps, supporting evidence, business impact, and remediation recommendations.

* Maintain testing artifacts and evidence to support regulatory, audit, and compliance requirements.

Offensive Security Expertise

* Defend findings during discussions with application teams, technology leaders, and other stakeholders.

* Participate in escalation calls involving disputed findings, risk discussions, and remediation planning.

* Exercise sound judgment when assessing vulnerability severity and exploitability.

* Collaborate with internal and external testing teams to improve testing coverage and effectiveness.

* Stay current with emerging attack techniques, technologies, and industry trends.

AI Security and Capability Development

* Contribute to AI security testing initiatives and emerging offensive security capabilities.

* Support AI model evaluation, testing, training, and security validation efforts.

* Provide feedback that improves testing methodologies, automation, tooling, and operational processes.

* Identify opportunities to increase testing efficiency, effectiveness, and scalability.

Quality and…