Lead Penetration Tester – Hybrid/Remote

SMBC; Charlotte (NC); Hybrid; USD 120,000 - 190,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

SMBC Group is seeking a Penetration Testing Lead to coordinate red team and penetration testing efforts. This highly technical role requires deep information security knowledge and experience guiding large exercises while keeping stakeholders informed.

The successful candidate will mentor the team, stay current on exploits, and coordinate with 3rd party vendors, drafting RFPs, rules of engagement, and detailed reports for C-level audiences as well as technical SME reports.

Qualifications

• Bachelor’s degree in IT, CS, or similar.
• Strong knowledge of MITRE ATT&CK framework and adversarial techniques.
• Deep understanding of network and web-based attacks.
• Diligent, proactive, and detail oriented.
• Ability to manage multiple tasks and prioritize effectively.
• Strong written and spoken communication.

Responsibilities

• Triage vulnerabilities from security tools and tests to assess impact.
• Carry out manual and automated security testing of systems and network infrastructure.
• Perform manual testing to validate vulnerabilities found via automated methods.
• Perform re-testing to confirm remediation.
• Support Penetration Testing Services across the global bank.
• Collaborate with Detection Engineering in Purple Team exercises to set up detections and mitigations.
• Support ongoing improvements to strengthen the bank’s security posture.

Skills

MITRE ATT&CK

Network attacks

Web attacks

Attention to detail

Multi-tasking

Communication skills

Education

Bachelor of Information Technology, Computer Science, or similar

Tools

PowerShell

Python

Job description

SMBC Group is seeking a Penetration Testing Lead to coordinate red team and penetration testing efforts. This highly technical role requires deep information security knowledge and experience guiding large exercises while keeping stakeholders informed.

The successful candidate will mentor the team, stay current on exploits, and coordinate with 3rd party vendors, drafting RFPs, rules of engagement, and detailed reports for C-level audiences as well as technical SME reports.