Senior Offensive Security Engineer: Mobile, API & Cloud

Usbank; Irving (TX); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Healthcare

401(k) plan

Paid vacation

Paid holidays

Parental leave

Adoption assistance

Disability insurance

Job summary

U.S. Bank is seeking a Senior Penetration Tester to lead advanced offensive security assessments across mobile applications, APIs, web platforms, cloud environments, and emerging AI-enabled technologies.

You will identify security weaknesses, validate business impact through controlled exploitation, and partner with engineering teams to strengthen security posture enterprise-wide. Ideal candidates have 8+ years in information security, 5+ years in mobile app security testing for Android and iOS,

Qualifications

• Eight or more years of information security experience.
• Two or more years of experience in IT infrastructure management.
• Two or more years of experience in application architecture.
• Two or more years of experience in risk management.
• Two or more years of experience in data architecture and middleware technology.
• Two or more years of IT operations and project management.

Responsibilities

• Lead penetration testing engagements across mobile apps, APIs, web apps, cloud platforms, and supporting infrastructure.
• Perform manual security testing and exploitation to identify vulnerabilities, validate risk, and demonstrate business impact.
• Assess applications against OWASP Top 10, API Security Top 10, MASVS, and MASTG.
• Evaluate security controls within AWS, Azure, containerized environments, and Kubernetes platforms.
• Conduct threat modeling and risk assessments to prioritize testing activities and remediation efforts.
• Develop detailed security reports including vulnerability analysis, risk ratings, attack paths, and remediation recommendations.
• Create and enhance security testing tools, scripts, and automation to improve effectiveness and coverage.
• Mentor junior testers and collaborate with stakeholders to strengthen enterprise security practices.

Skills

Information Security

Mobile security testing

Threat modeling

Scripting

Cloud security concepts

OWASP framework knowledge

Communication with stakeholders

Exploit methodology

Education

Bachelor’s degree in Engineering or Science

Tools

Burp Suite Pro

Postman

Insomnia

Nmap

Metasploit

Kali Linux

AWS

Azure

Kubernetes

Docker

Job description

U.S. Bank is seeking a Senior Penetration Tester to lead advanced offensive security assessments across mobile applications, APIs, web platforms, cloud environments, and emerging AI-enabled technologies.

You will identify security weaknesses, validate business impact through controlled exploitation, and partner with engineering teams to strengthen security posture enterprise-wide. Ideal candidates have 8+ years in information security, 5+ years in mobile app security testing for Android and iOS,