Senior Penetration Testing Engineer - AI/LLM Enabled

State Street; Clifton (NJ); Hybrid; USD 120,000 - 203,000; Full time

Benefits offered by this job

Comprehensive benefits

Job summary

State Street is seeking a Senior Penetration Testing Engineer to join the Threat Intelligence and Assurance team. This highly technical role requires hands-on testing across networks and applications, working with engineering and infrastructure to validate fixes and drive secure design.

In a regulated banking context, you will establish testing standards, deliver regulator-ready reports with risk context, and lead AI/LLM testing initiatives.

Qualifications

• 5+ years in penetration testing with strong experience across both application and network testing in high-security/highly regulated environments.
• Experience managing third-party penetration testing vendors, including quality validation and outcome assurance.
• Deep expertise in application penetration testing (web, APIs, mobile) and solid understanding of enterprise network attack paths.
• Ability to translate technical findings into actionable, risk-based remediation guidance and influence stakeholders.

Responsibilities

• Design and manage third party network penetration tests, including scoping, vendor selection, rules of engagement, quality assurance, and validation of results.
• Lead end-to-end application penetration testing across internal and third party providers (web, API), including scoping, execution, exploitation, and retesting.
• Perform advanced testing across authn/authz, business logic, injection, API abuse, crypto misuse, and access control weaknesses.
• Establish and enforce testing standards for both internal teams and external vendors to ensure consistency, depth, and regulatory defensibility.
• Deliver high-quality, regulator-ready reporting with clear exploitability, risk context, and actionable remediation guidance.
• Lead the use of AI/LLM-enabled testing techniques and conduct assurance testing of enterprise AI/LLM deployments.

Skills

Penetration testing

Vendor management

Risk assessment

Communication

Collaboration

AI/LLM testing

Secure development

Education

BS/MS in relevant field

OSCP/OSEP/OSWE

GPEN/GXPN

GWAPT

PNPT

GCPN

Job description

State Street is seeking a Senior Penetration Testing Engineer to join the Threat Intelligence and Assurance team. This highly technical role requires hands-on testing across networks and applications, working with engineering and infrastructure to validate fixes and drive secure design.

In a regulated banking context, you will establish testing standards, deliver regulator-ready reports with risk context, and lead AI/LLM testing initiatives.