Senior Penetration Tester — Offensive Security Lead

Testing Site - JPMC; Washington (District of Columbia); On-site; USD 134,000 - 281,000; Full time

Benefits offered by this job

Comprehensive health care coverage

On-site health centers

Retirement savings plan

Backup childcare

Tuition reimbursement

Mental health support

Financial coaching

Job summary

JPMorgan Chase & Co. is seeking a senior Assessments & Exercises VP to drive the security of critical banking applications and platforms through hands-on penetration testing.

You will plan, execute, and report on engagements across web, API, cloud, and mobile environments, leading with industry-standard methods and strong remediation guidance. The role requires deep expertise in offensive security, clear communication, and a commitment to mentoring junior testers while staying current on new

Qualifications

• 5+ years of hands-on penetration testing experience in offensive security.
• Expertise in manual testing of web, API, cloud (AWS/Azure/GCP), infrastructure, thick-client, and mobile apps.
• Strong understanding of security assessment methodologies such as OWASP Top Ten and NIST CSF.
• Ability to identify systemic security issues and provide actionable remediation recommendations.
• Exceptional organizational and communication skills, including the ability to write detailed technical reports for technical and non-technical stakeholders.
• Experience conducting peer reviews of penetration test reports and mentoring junior testers.
• Continuous learner who keeps up with latest offensive security trends, tools, and techniques.

Responsibilities

• Plan, scope, and execute penetration testing engagements across a variety of environments.
• Collect and validate prerequisites for each engagement, including access and approvals.
• Perform manual and automated testing to identify vulnerabilities and weaknesses.
• Document and communicate findings with risk assessments and remediation guidance.
• Conduct peer reviews of reports to ensure accuracy and quality.
• Collaborate with development, infrastructure, and security teams to support remediation.
• Stay current with emerging threats and attack techniques through research and industry groups.
• Contribute to improving testing methodologies, tools, and frameworks.

Skills

Penetration testing

Web/API/Cloud testing

Security frameworks

Issue identification

Communication

Peer reviews

Mentoring

Continuous learning

Tools

Burp Suite

Nmap

Metasploit

Job description

JPMorgan Chase & Co. is seeking a senior Assessments & Exercises VP to drive the security of critical banking applications and platforms through hands-on penetration testing.

You will plan, execute, and report on engagements across web, API, cloud, and mobile environments, leading with industry-standard methods and strong remediation guidance. The role requires deep expertise in offensive security, clear communication, and a commitment to mentoring junior testers while staying current on new