Senior Offensive Security Tester

JPMorgan Chase & Co.

Washington (District of Columbia)

On-site

USD 180,000 - 240,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

JPMorgan Chase & Co. in Washington, DC is seeking a Senior Penetration Tester to plan, execute, and report on offensive security engagements across web, API, cloud, and mobile environments, driving risk reduction through actionable findings.

The candidate will mentor junior testers, perform peer reviews, and collaborate with development and security teams to remediate vulnerabilities while staying current with evolving threats and industry practices.

Qualifications

5+ years of hands-on penetration testing in offensive security.
Experience testing web, API, cloud, infrastructure, thick-client, and mobile apps.
Ability to write detailed technical reports and present findings to stakeholders.
Mentor junior testers and perform peer reviews of engagement deliverables.

Responsibilities

Plan, scope, and execute penetration testing across web apps, APIs, cloud, infrastructure, and mobile.
Collect prerequisites, ensure access, documentation, and approvals are in place.
Perform manual and automated testing to identify vulnerabilities and misconfigurations.
Document findings with risk assessments and remediation recommendations.
Conduct peer reviews to ensure accuracy and quality of deliverables.
Collaborate with development, infrastructure, and security teams to remediate findings.
Stay current with emerging threats and participate in industry groups.
Contribute to improvements in testing methodologies and tools.