Hybrid Web App Penetration Engineer

Alliant Credit Union; Chicago (IL); Hybrid; USD 77,000 - 119,000; Full time

Benefits offered by this job

Annual performance bonus

Work from home up to 3 days a week

Paid parental leave

Employee discount programs

Time off including paid personal and s

11 paid holidays

Job summary

Alliant Credit Union in Chicago offers a hybrid role focused on planning, executing, and reporting on penetration testing for web applications and APIs across homegrown and vendor systems.

You will perform hands-on offensive security testing, develop PoCs, and work with software engineering and security teams to remediate findings, while staying current on threats and best practices relevant to cloud environments.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or related field.
• Penetration testing/offensive security experience preferred.
• Industry certifications or equivalent in offensive security are a plus.

Responsibilities

• Plan, execute, and report on web app and API penetration testing across homegrown and vendor systems.
• Perform manual and automated testing including authenticated scenarios.
• Identify and validate vulnerabilities; drive remediation and retesting.
• Develop PoCs and document attack paths when appropriate.
• Create clear reports for technical and non-technical audiences.
• Maintain and administer DAST, SAST, and SCA tools.
• Stay current on threats and best practices relevant to cloud environments.

Skills

Penetration testing

Offensive security

Python scripting

Education

Bachelor's degree in Computer Science / Cybersecurity / Information Systems or related

Tools

DAST tools

SAST tools

SCA tools

Job description

Alliant Credit Union in Chicago offers a hybrid role focused on planning, executing, and reporting on penetration testing for web applications and APIs across homegrown and vendor systems.

You will perform hands-on offensive security testing, develop PoCs, and work with software engineering and security teams to remediate findings, while staying current on threats and best practices relevant to cloud environments.