Hybrid: Senior Penetration Tester - AI-Driven Security

State Street; Berwyn (PA); Hybrid; USD 120,000 - 203,000; Full time

Benefits offered by this job

401K with company match

Health insurance

Paid time off

Employee Assistance Program

Job summary

State Street is seeking a Senior Penetration Testing Engineer to join our Penetration Testing Team in a regulated banking environment. This hands‑on, technical role emphasizes regulator‑ready outputs and collaboration with engineering to improve secure design.

Responsibilities include third‑party network testing design, end‑to‑end web/API testing, and enforcing standards for risk and audit defensibility. Preferred: 5+ years in pentesting, vendor management, certifications (OSCP/OSWE, GPEN,

Qualifications

• 5+ years in penetration testing in high-security, regulated environments.
• Experience managing third-party penetration testing vendors and quality validation.
• Strong expertise in application and network testing; knowledge of modern architectures (cloud-native, microservices).
• Ability to translate findings into risk-based remediation guidance for stakeholders.
• Nice to have: experience using AI/LLM tools for testing.

Responsibilities

• Design and manage third‑party network penetration tests, including scoping and results validation.
• Lead end-to-end application testing across web and API providers, including scoping, execution, and retesting.
• Enforce testing standards for internal teams and external vendors to ensure regulatory defensibility.
• Deliver regulator-ready reports with risk context and remediation guidance.
• Collaborate with engineering and infrastructure to validate remediation and strengthen secure deployment practices.

Skills

Penetration testing

Vendor management

Application testing

Network testing

Cloud native architectures

CI/CD pipelines

Risk-based remediation

AI/LLM testing

Education

BS/MS in relevant field

Certifications: OSCP/OSWE, GPEN, GWAPT

Job description

State Street is seeking a Senior Penetration Testing Engineer to join our Penetration Testing Team in a regulated banking environment. This hands‑on, technical role emphasizes regulator‑ready outputs and collaboration with engineering to improve secure design.

Responsibilities include third‑party network testing design, end‑to‑end web/API testing, and enforcing standards for risk and audit defensibility. Preferred: 5+ years in pentesting, vendor management, certifications (OSCP/OSWE, GPEN,