Remote Lead Penetration Test Engineer

S&P Global; Connecticut; Hybrid; USD 135,000 - 200,000; Full time

Job summary

S&P Global is seeking a Lead Penetration Test Engineer to drive offensive security across web applications, infrastructure, and cloud environments. The role combines hands-on testing, tooling development, and collaboration with engineering teams to strengthen security controls.

Ideal candidates bring 8+ years in information security, strong scripting skills, and certifications, with the ability to translate complex findings into clear remediation guidance for technical and executive

Qualifications

• Minimum 8 years of information security experience with focus on penetration testing and vulnerability management.
• Hands-on with tools like Burp Suite, Nessus, Metasploit, Nmap and frameworks such as OWASP Top 10 and MITRE ATT&CK.

Responsibilities

• Lead penetration tests of web apps, infrastructure, and cloud environments using manual and automated methods.
• Develop tools and scripts to enhance security testing and CI/CD integration.
• Perform vulnerability assessments and remediation planning with engineering teams.
• Lead attack simulations and threat research to inform security strategy.
• Communicate findings and actionable remediation guidance to stakeholders.

Skills

Penetration testing

Application security

Vulnerability management

Cloud security

Scripting (Python, Bash)

Education

Bachelor's degree in CS/Info Systems

Tools

Burp Suite

Nessus

Metasploit

Nmap

Job description

S&P Global is seeking a Lead Penetration Test Engineer to drive offensive security across web applications, infrastructure, and cloud environments. The role combines hands-on testing, tooling development, and collaboration with engineering teams to strengthen security controls.

Ideal candidates bring 8+ years in information security, strong scripting skills, and certifications, with the ability to translate complex findings into clear remediation guidance for technical and executive