Senior Offensive Security Lead - Banking App Pen Testing

JPMorgan Chase; Tampa (FL); On-site; USD 157,000 - 260,000; Full time

Job summary

JPMorgan Chase is seeking an experienced Senior Penetration Tester to lead offensive security testing across diverse platforms and environments. You will plan, execute, and report on high-impact engagements, collaborating with owners to understand root causes and drive remediation.

Ideal candidates have 5+ years of hands-on pentesting, deep knowledge of web/API/cloud/mobile assessments, and strong reporting and mentoring skills.

Qualifications

• 5+ years of hands-on penetration testing experience in offensive security.
• Experience with web, API, cloud, infrastructure, and mobile assessments.

Responsibilities

• Plan, scope, and execute penetration testing engagements across web, API, cloud, infrastructure, thick-client, and mobile apps.
• Collect prerequisites, ensure access and approvals are in place.
• Perform manual and automated testing to identify vulnerabilities and misconfigurations.
• Document findings with risk assessments and remediation recommendations.
• Conduct peer reviews of reports to ensure quality.

Skills

Penetration testing

Web/API security

Cloud security (AWS/Azure/GCP)

Threat modeling

Security reporting

Mentoring junior testers

Education

OSWE

CREST CRT/CCT

OSCP

GPEN

Tools

Burp Suite

Nmap

Metasploit

Job description

JPMorgan Chase is seeking an experienced Senior Penetration Tester to lead offensive security testing across diverse platforms and environments. You will plan, execute, and report on high-impact engagements, collaborating with owners to understand root causes and drive remediation.

Ideal candidates have 5+ years of hands-on pentesting, deep knowledge of web/API/cloud/mobile assessments, and strong reporting and mentoring skills.