Senior Offensive Security Engineer - Pentester

Job Overview

The Cyber Security Assurance Division is looking for a Senior Full Stack Penetration Tester to lead and perform advanced security assessments across the bank’s global technology environment. The role focuses on identifying exploitable high‑risk vulnerabilities in critical systems to support a proactive security posture.

• Lead and conduct research and assessments of the bank’s technologies, applications, and security controls.
• Apply a range of penetration testing techniques (reconnaissance, weaponization, delivery, exploitation) to identify and prove high‑risk vulnerabilities.
• Develop and present clear, precise risk articulations to technical and non‑technical stakeholders.
• Collaborate with security partners, CIO clients, and business lines to complete assessments and report findings.
• Coordinate with senior leadership on development projects and share knowledge with junior engineers.
• Assist with monitoring and response functions to help teams improve threat‑response capability.

• Minimum of 5+ years of professional offensive security experience.
• Ability to critically examine systems from a threat actor perspective and articulate risk.
• Proficiency with common penetration testing tools (Burp Suite, Metasploit, nmap, etc.).
• Solid understanding of voice and data networks, major operating systems, Active Directory, and related peripherals.
• Strong desire to learn new technologies and skill sets.
• Knowledge of tactics, techniques, and procedures associated with malicious activity; ability to chain vulnerabilities for advanced exploitation.
• Proficiency in report delivery and technical documentation of vulnerabilities.
• Effective coding/scripting skills in Python, Java, C#, or equivalent.

• Certifications:
  
  OSCP, GPEN, GXPN, OSED, OSEP, OSWE, OSCE, GWAPT.
• Remote work capability when necessary.
• Previous experience in the financial industry.
• Experience with hardware hacking, embedded systems analysis, and IoT hacking.

• Shift: 1st shift (United States).
• Hours per week: 40.

Pay range: $ – $ annualized salary (based on experience, education, and skill set). Discretionary incentive: eligible for annual discretionary plan.

This role is benefits eligible. Industry‑leading benefits, paid time off, and resources are provided to support employees’ physical, emotional, and financial well‑being.

Privacy Statement:

Pay Transparency: