Senior Penetration Tester

When you join Verizon

You want more out of a career. A place to share your ideas freely - even if they're daring or different. Where the true you can learn, grow, and thrive. At Verizon, we power and empower how people live, work and play by connecting them to what brings them joy. We do what we love - driving innovation, creativity, and impact in the world.

Our V Team is a community of people who anticipate, lead, and believe that listening is where learning begins. In crisis and in celebration, we come together - lifting our communities and building trust in how we show up, everywhere & always. Want in? Join the #VTeamLife.

The Verizon Cyber Security (VCS) organization enables the business by protecting assets and information across Verizon networks, infrastructure and applications. VCS integrates cybersecurity governance, policies, technologies and operations across Verizon, and works to incorporate security into the design of technology systems and services.

Verizon Cybersecurity (VCS) is looking for an Application Penetration Tester to join our Enterprise Pen Test team. You'll be joining a group of talented, creative thinkers who "act like the enemy" to focus on ensuring that infrastructure and applications (web, mobile, and API) are secure by performing penetration testing from both inside and outside of Verizon. This team isn't a "copy and paste from a scan tool" reporting team, or a cookie cutter just scanning with tools team, or a team that just monitors and supports security scanning tools used by developers.

This team is an Enterprise recognized and supported group of skilled, experienced and certified ethical hacking Verizon employees who are trusted to direct themselves with a lot of unknowns.

The successful candidate will possess an effective aptitude in thinking like an adversary, security of Infrastructure, Web applications, APIs and Mobile Applications, mentoring and leading junior pen testers and effectively translating highly technical information to internal customers in a way that supports VCS and broader Verizon goals.

• Leading and performing full scope penetration testing on complex, high risk web applications, Infrastructure, APIs and Mobile applications.
• Successfully working complex issues that require the analysis and in-depth evaluation of variable factors.
• Interpreting broad goals with unknown variables and craft, execute plans to achieve these goals with little to no contemporary "clear and transparent" standards.
• Developing resolutions that require the frequent use of creativity and out of the box thinking.
• Configuring and safely utilizing attacker tools, tactics, and procedures for Verizon environments.
• Developing comprehensive and accurate reports and presentations for both technical and executive audiences.
• The ability to make collaborative and independent decisions on the impact of an exposure to Verizon
• Acting as a SME and guide, advising on security vulnerability impact, ratings and remediation recommendations across the organization as needed.
• Helping to lead the definition of Pen Test (with AI) strategy and standards to further enhance the company's security posture, collaborating with management/exec leadership.
• Supporting, designing and architecting an inhouse developed AI Pen Testing harness.
• Effectively communicating findings and strategy to client stakeholders including technical staff, executive leadership, and legal counsel
• Working closely with stakeholders and developers providing risk-appropriate and pragmatic recommendations to correct found vulnerabilities.
• Translating functional plans into operational processes and guiding execution of the development of scripts, tools, or methodologies to enhance Verizon's pen testing processes and effectiveness
• Driving technical oversight and mentoring junior pen testers on pen test engagements, vulnerability impact and ratings and remediation recommendations.
• Providing leadership and guidance to advance the offensive capabilities of the team and its subsequent ability to defend the Verizon Enterprise.

For this role, we are looking for an experienced hands on pen tester who thinks like an attacker and outside of the box, who is vocal and can help lead/motivate Jr team members and who is motivated to evolve pen offensive security w/ AI - not just work with it, nor just do small jobs with it but innovate and develop it.

Creative thinking, working autonomously and strategic…