Senior Mainframe Security Engineer & Penetration Tester

Truist; Atlanta (GA); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, vision benefits

Vacation & sick days

Job summary

Truist is seeking an experienced penetration tester focused on mainframe environments to identify vulnerabilities in z/OS subsystems and networks. You will document findings with clear steps and work with teams to reduce risk.

The role requires 7+ years in security engineering, deep cybersecurity expertise, and experience with mainframe tools (RACF/ACF2/Top Secret). Telecommuting may be considered for qualified candidates; Eastern Time work hours apply.

Qualifications

• Bachelor’s degree or equivalent education, training, and work-related experience.
• Minimum of 7 years of experience in security engineering or related cybersecurity roles.
• Deep specialized knowledge in cybersecurity principles, theories, and concepts.
• Proven experience in software development lifecycle security practices.
• Deep knowledge of threat modeling, security testing, and penetration testing.
• Experience implementing and managing complex information security technologies.

Responsibilities

• Conducts black box, grey box and assumed breach penetration tests of enterprise z/OS environments.
• Uses manual techniques and scripting (REXX, JCL, Assembler, Python) and offensive tooling to enumerate users and resources.
• Evaluates exploitability and business impact and assigns risk levels.
• Documents findings with reproduction steps and remediation recommendations.
• Presents findings to application teams and technology leaders.
• Performs validation and retesting to confirm remediation and maintain audit evidence.
• Partners with testing teams to improve coverage, tooling, and repeatable processes.
• Mentors other security professionals and stays updated on mainframe attack techniques.

Skills

Security engineering

Penetration testing

Threat modeling

Secure SDLC

Mainframe security

Software development

Technical writing

Stakeholder communication

Education

Bachelor’s degree or equivalent

Tools

REXX

JCL

Assembler

Python

Job description

Truist is seeking an experienced penetration tester focused on mainframe environments to identify vulnerabilities in z/OS subsystems and networks. You will document findings with clear steps and work with teams to reduce risk.

The role requires 7+ years in security engineering, deep cybersecurity expertise, and experience with mainframe tools (RACF/ACF2/Top Secret). Telecommuting may be considered for qualified candidates; Eastern Time work hours apply.