Remote Mainframe Security Senior Engineer & Pen Tester

Truist; Richmond (VA); Hybrid; USD 140,000 - 180,000; Full time

Benefits offered by this job

Medical Insurance

PTO

401k

Job summary

Truist is seeking an experienced security engineer focused on advanced penetration testing of z/OS environments. You will assess mainframe components like RACF, ACF2 and Top Secret, and lead remediation guidance for cross-functional teams. Strong writing and communication are essential.

The role supports Eastern Time hours with potential remote consideration for highly qualified candidates. A solid understanding of PCI DSS and SOX is required.

Qualifications

• Bachelor’s degree or equivalent education, training, and work-related experience.
• Minimum of 7 years of experience in security engineering or related cybersecurity roles.
• Deep specialized knowledge in cybersecurity principles, theories, and concepts.
• Proven experience in software development lifecycle security practices.
• Deep knowledge of threat modeling, security testing, and penetration testing.
• Experience implementing and managing complex information security technologies.

Responsibilities

• Conducts black box, grey box and assumed breach penetration tests of enterprise z/OS environments and related subsystems.
• Uses scripting and offensive tooling to enumerate users, map datasets, and exploit misconfigurations.
• Evaluates exploitability and risk, and documents actionable remediation recommendations.
• Presents findings to technical teams and risk partners with clear supporting evidence.
• Performs validation and retesting to confirm remediation and maintain audit trail.
• Partners to improve mainframe testing coverage, tooling, and repeatable processes.
• Mentors other security professionals and stays current on mainframe threats.

Skills

Penetration testing

Security engineering

Threat modeling

Secure SDLC

Mainframe security

Documentation & reporting

Education

Bachelor's degree

Tools

RACF

ACF2

Top Secret

Job description

Truist is seeking an experienced security engineer focused on advanced penetration testing of z/OS environments. You will assess mainframe components like RACF, ACF2 and Top Secret, and lead remediation guidance for cross-functional teams. Strong writing and communication are essential.

The role supports Eastern Time hours with potential remote consideration for highly qualified candidates. A solid understanding of PCI DSS and SOX is required.