Senior Offensive Security Engineer

Testing Site - JPMC; New York (NY); On-site; USD 210,000 - 250,000; Full time

Job summary

Testing Site - JPMC is seeking an Assessments & Exercises Vice President to lead penetration testing across high-impact applications, platforms, and services. You will plan, execute, and report engagements while guiding remediation with owners and stakeholders.

You will leverage industry-standard tools (Burp Suite, Nmap, Metasploit) and methodologies to identify vulnerabilities, drive risk reduction, and strengthen security posture.

Qualifications

• 5+ years of hands-on penetration testing experience.
• Ability to deliver detailed technical reports to technical and non-technical stakeholders.
• Experience mentoring junior testers and conducting peer reviews.
• Knowledge of OWASP Top Ten, NIST Cybersecurity Framework, and related standards.

Responsibilities

• Plan, scope, and execute penetration testing engagements across web apps, APIs, cloud, infrastructure, thick-client, and mobile apps.
• Collect and validate prerequisites for engagements with access, documentation, and approvals.
• Perform manual and automated testing to identify vulnerabilities and misconfigurations using standard tools and custom scripts.
• Document findings with risk assessments and remediation recommendations in comprehensive reports.
• Conduct peer reviews of penetration test reports to ensure quality and consistency.
• Collaborate with development, infrastructure, and security teams to clarify findings and support remediation.
• Stay current with emerging threats through threat intelligence and security research.
• Improve testing methodologies, tools, and frameworks to align with firm strategy and regulatory requirements.

Skills

Penetration testing

Offensive security

Threat modeling

Reporting & communication

Education

Certifications: OSWE, CREST CRT/CCT, OSCP, OSCE, GXPN, GWAPT, GPEN, GMOB, BSCP

Tools

Burp Suite

Nmap

Metasploit

Job description

Testing Site - JPMC is seeking an Assessments & Exercises Vice President to lead penetration testing across high-impact applications, platforms, and services. You will plan, execute, and report engagements while guiding remediation with owners and stakeholders.

You will leverage industry-standard tools (Burp Suite, Nmap, Metasploit) and methodologies to identify vulnerabilities, drive risk reduction, and strengthen security posture.