Senior Mainframe Penetration Tester — Remote

Habitat For Humanity Of Durham; Raleigh (NC); Hybrid; USD 140,000 - 180,000; Full time

Benefits offered by this job

Medical benefits

401k plan

Paid vacation

Job summary

Truist is seeking a senior penetration tester focused on mainframe environments. You will perform advanced testing across z/OS systems, document clear findings, and collaborate with engineers and risk partners to reduce risk.

Remote work options may be available for highly qualified candidates, with guidance on Eastern Time hours. The role requires 7+ years in security engineering, strong mainframe knowledge (RACF/ACF2/Top Secret, z/OS, CICS, Db2), and practical scripting experience.

Qualifications

• Bachelor's degree or equivalent education, training, and work-related experience.
• Minimum of 7 years of experience in security engineering or related cybersecurity roles.
• Deep specialized knowledge in cybersecurity principles, theories, and concepts.
• Proven experience in software development lifecycle security practices.
• Deep knowledge of threat modeling, security testing, and penetration testing.
• Experience implementing and managing complex information security technologies.

Responsibilities

• Conducts black box, grey box and assumed breach penetration tests of enterprise z/OS environments, covering the USS, RACF/ACF2/Top Secret subsystems, CICS/IMS/db2/MQ, JCL/TSO.
• Uses manual techniques and scripting (REXX, JCL, Assembler, Python) to enumerate users and resources and exploit misconfigurations.
• Documents findings with clear reproduction steps, evidence, impact statements, and remediation recommendations.
• Presents and defends technical findings to application teams, mainframe engineers, risk partners and stakeholders.
• Performs validation and retesting to confirm remediation and maintains testing evidence for audits (PCI DSS, SOX).
• Collaborates with internal/external teams to improve mainframe testing coverage and tooling.
• Mentors other security professionals and stays current on mainframe attack techniques and threats.

Skills

Penetration testing

Mainframe security

Threat modeling

Security testing

Automated tooling

Technical writing

Education

Bachelor's degree or equivalent

Tools

RACF

ACF2

Top Secret

z/OS

JCL

TSO/ISPF

CICS

Db2

MQ

Python

REXX

Job description

Truist is seeking a senior penetration tester focused on mainframe environments. You will perform advanced testing across z/OS systems, document clear findings, and collaborate with engineers and risk partners to reduce risk.

Remote work options may be available for highly qualified candidates, with guidance on Eastern Time hours. The role requires 7+ years in security engineering, strong mainframe knowledge (RACF/ACF2/Top Secret, z/OS, CICS, Db2), and practical scripting experience.