Senior Offensive Security Penetration Tester

Testing Site - JPMC; Houston (TX); On-site; USD 180,000 - 280,000; Full time

Job summary

Testing Site - JPMC is seeking an Assessments & Exercises Vice President to lead penetration testing across web, API, cloud, infrastructure, and mobile environments. You will plan engagements, validate prerequisites, and guide remediation while reporting findings to senior stakeholders.

We value deep offensive security expertise, continuous learning, and collaboration with cross-functional teams to strengthen the organization’s security posture and regulatory alignment.

Qualifications

• 5+ years of hands-on penetration testing experience in offensive security.
• Experience testing web, API, cloud, infrastructure, mobile apps.
• Ability to write detailed technical reports and present findings to stakeholders.

Responsibilities

• Plan, scope, and execute penetration testing engagements across web, API, cloud, and mobile apps.
• Collect prerequisites and obtain necessary access and approvals for engagements.
• Perform manual and automated testing to identify vulnerabilities and risks, using standard tools and scripts.
• Document findings with risk assessments and actionable remediation recommendations.
• Review peers’ penetration test reports to ensure quality and consistency.
• Collaborate with development and security teams to remediate findings and improve security posture.

Skills

Penetration testing

Offensive security

Report writing

Mentoring

Education

OSWE

CREST CRT

OSCP

Tools

Burp Suite

Nmap

Metasploit

Job description

Testing Site - JPMC is seeking an Assessments & Exercises Vice President to lead penetration testing across web, API, cloud, infrastructure, and mobile environments. You will plan engagements, validate prerequisites, and guide remediation while reporting findings to senior stakeholders.

We value deep offensive security expertise, continuous learning, and collaboration with cross-functional teams to strengthen the organization’s security posture and regulatory alignment.