Senior Security Engineer – Pen Testing & GRC

Requirements

Must have:

We are seeking a proficient Senior Security Engineer with a specialization in Penetration Testing. To be eligible, you should possess a Bachelors degree (B.A. or B.S.) in information systems or a similar field, along with at least 5 years of experience in technology, including a minimum of 2 years focusing on penetration testing and security assessments. Previous experience in solution design and implementation is preferred.

Hands‑on experience with penetration testing tools such as Metasploit, Burp Suite, Nmap, Wireshark, and Cobalt Strike is necessary. Familiarity with scripting/programming languages (Python, Power Shell, Bash) for tool development and automation is important. Knowledge of compliance frameworks like PCI DSS, HIPAA, GLBA, and ISO 27000 series is also highly desirable. Relevant certifications (OSCP, OSCE, GPEN, CISSP, etc.) are a plus.

As a Senior Security Engineer, you will be responsible for performing thorough penetration tests for both internal and external environments, including network and application assessments, vulnerability assessments, and executing social engineering campaigns. You will conduct red team operations and vulnerability assessments to unearth security weaknesses in systems and infrastructure. Your role will involve developing custom exploits and tools necessary for penetration testing and creating detailed incident response plans.

You will write professional reports outlining findings, risk ratings, and recommendations for remediating vulnerabilities. Additionally, you will work with Account Executives to support sales opportunities, interface with end-users for designing new solutions, and troubleshoot existing systems. Project management duties, including updating management on project status and creating statements of work, are also part of your responsibilities.

In joining our team at Structured Communication Systems, you will be part of a leading IT consultancy and systems integrator that excels in creating secure, reliable solutions, ensuring business continuity, and safeguarding information assets. We value exceptional customer service and encourage continuous learning and knowledge development. Our working conditions involve a mix of office and data center environments, with some travel required for customer interactions and short to medium‑term projects.

We offer a competitive salary range of $110,000 to $130,000 annually, comprehensive benefits, and opportunities for professional growth, including training and industry certifications. We welcome all qualified candidates eligible to work in the United States, without offering visa sponsorship.