Senior Offensive Security Tester — Mobile, API & Cloud

Us Bank; Irving (TX); On-site; USD 140,000 - 210,000; Full time

Benefits offered by this job

Healthcare (medical, dental, vision)

401(k) retirement plan

Paid vacation

Life insurance

Job summary

U.S. Bank is seeking a Senior Penetration Tester to lead offensive security assessments across mobile apps, APIs, web platforms, cloud environments, and AI-enabled technologies.

You will identify vulnerabilities, demonstrate business impact, and partner with engineering teams to strengthen security posture. This onsite role requires 8+ years in information security, mobile security testing for Android and iOS, and strong knowledge of OWASP, SANS, and MASVS frameworks.

Qualifications

• Bachelor’s degree in Engineering or Science, or equivalent work experience.
• Eight or more years of experience in information security.
• Two or more years of IT infrastructure management, application architecture, risk management, data architecture, middleware technology, IT operations and project management.
• 8+ years of Information Security experience with offensive security and penetration testing.
• 5+ years of hands-on mobile application security testing for Android and iOS.
• Knowledge of OWASP Top 10, API Security Top 10, SANS Top 25, OWASP MASVS, and MASTG.
• Experience with Burp Suite Pro, Postman, Insomnia, Nmap, Metasploit, Kali Linux.
• Experience AWS, Azure, Kubernetes, containers, and cloud-native security platforms.
• Scripting in Python, PowerShell, Bash, Ruby, Go.
• Understanding of HTTP/S, REST APIs, OAuth, SAML, JWT, TCP/IP, DNS, firewalls, IDS/IPS, application architecture.
• AI and ML security risks.
• PCI-DSS, HIPAA, NIST 800-53, ISO 27001, FedRAMP.
• Excellent communication skills with the ability to present findings to technical teams, business stakeholders, and executive leadership.

Responsibilities

• Lead penetration testing engagements across mobile applications, APIs, web applications, cloud platforms, and supporting infrastructure.
• Perform manual security testing and exploitation to identify vulnerabilities, validate risk, and demonstrate business impact.
• Assess applications against OWASP Top 10, OWASP API Security Top 10, OWASP MASVS, and MASTG.
• Evaluate security controls within AWS, Azure, containerized environments, and Kubernetes platforms.
• Conduct threat modeling and risk assessments to prioritize testing activities and remediation efforts.
• Develop detailed security reports including vulnerability analysis, risk ratings, attack paths, and remediation recommendations.
• Create and enhance security testing tools, scripts, and automation to improve operational effectiveness and assessment coverage.
• Mentor junior testers, support knowledge-sharing initiatives, and collaborate with stakeholders to strengthen enterprise security practices.

Skills

Penetration testing

Mobile security

API security

Cloud security

Burp Suite Pro

Postman

Nmap

Metasploit

Kali Linux

Python

PowerShell

Bash

Ruby

Go

HTTP/S

OAuth

SAML

Education

Bachelor's degree in Engineering or Science

Tools

AWS

Azure

Kubernetes

Job description

U.S. Bank is seeking a Senior Penetration Tester to lead offensive security assessments across mobile apps, APIs, web platforms, cloud environments, and AI-enabled technologies.

You will identify vulnerabilities, demonstrate business impact, and partner with engineering teams to strengthen security posture. This onsite role requires 8+ years in information security, mobile security testing for Android and iOS, and strong knowledge of OWASP, SANS, and MASVS frameworks.