Description

You design and execute testing and simulations, including penetration tests, technical controls assessments, cyber exercises, or resiliency simulations.

Responsibilities

• Evaluate controls for effectiveness and impact on operational risk, identifying opportunities to automate control evaluation.
• Collaborate with cross-functional teams to develop comprehensive assessment reports detailing findings, vulnerabilities, and remediation recommendations.
• Design and coordinate offensive security testing, assessments, or simulation exercises.
• Utilize threat intelligence and security research to track emerging threats and industry best practices.
• Test web applications, internal/external infrastructures, and cloud platforms.

Required Skills

• 8+ years of experience in cybersecurity or resiliency.
• Demonstrated skill in planning, designing, and coordinating offensive security testing.
• Significant experience conducting manual penetration tests against web, API, and mobile (Android & iOS) applications.
• Proficiency in multiple security assessment methodologies and offensive testing tools.
• Experience testing cloud platforms, specifically AWS, Azure, and GCP.
• Knowledge of US financial services sector cybersecurity practices and operational risk management.
• Excellent report writing skills with the ability to influence stakeholders.
• Familiarity with incident response methodologies and regulatory requirements.

Key Skills

Education

Bachelor's degree