The Company is in search of a Senior Penetration Testing Engineer to join their team. The successful candidate will be a subject matter expert in application penetration testing, with a focus on building and applying rigorous, repeatable testing approaches to evaluate security control effectiveness. This role is deeply technical and hands-on, requiring the engineer to operate in a highly regulated environment and ensure that testing outputs are technically sound, evidence-based, and aligned with risk and audit expectations. Responsibilities include designing and managing third-party network penetration tests, leading end-to-end application penetration testing, and performing advanced testing across various security weaknesses. The engineer will also be expected to establish and enforce testing standards, deliver high-quality reporting, and partner with engineering and infrastructure teams to validate remediation and strengthen secure development practices. To succeed in this role, the ideal candidate will have a practical, risk-focused mindset, strong technical depth, and the ability to balance hands-on expertise with accountability for end-to-end outcomes. Collaboration, clear communication, and a focus on continuous improvement are also highly valued. The role requires a minimum of 5 years' experience in penetration testing, with a strong background in both application and network testing, particularly in high-security and highly regulated environments. Deep expertise in application penetration testing and a solid understanding of enterprise network attack paths are essential. The candidate should be adept at translating technical findings into actionable, risk-based remediation guidance and have experience in managing third-party penetration testing vendors. Education and certifications in relevant fields are desired, and experience with AI/LLM tools in the context of penetration testing is a plus.

Hiring Company

State Street