Senior Penetration Testing Engineer: App & Network

STATE STREET CORPORATION; Austin (TX); Hybrid; USD 120,000 - 203,000; Full time

Benefits offered by this job

401K with company match

Insurance coverage: life/medical/dent/

Job summary

State Street Corporation is seeking a Senior Penetration Testing Engineer to join a top-tier Penetration Testing Team within Threat Intelligence and Assurance. The role is highly technical, hands-on, and focuses on applying rigorous testing approaches across complex systems in a regulated banking environment.

You will design, lead, and execute internal and third‑party testing for web, API, and network domains, while driving improvement in secure design and implementation.

Qualifications

• 5+ years in penetration testing in high-security environments.
• Experience managing third‑party penetration testing vendors.
• Deep expertise in application testing (web, APIs, mobile) and enterprise network paths.
• Knowledge of modern architectures (cloud-native, microservices, CI/CD).
• Ability to translate findings into risk-based remediation guidance.
• Nice to have: experience using AI/LLM tools for testing.

Responsibilities

• Design and manage third‑party network penetration tests with scoping and QA.
• Lead end‑to‑end application penetration testing (web, API) with retesting.
• Perform advanced testing across authn/authz, injection, API abuse, and crypto misuse.
• Establish and enforce testing standards for internal and external teams.
• Deliver regulator‑ready reports with remediation guidance.
• Lead AI/LLM‑enabled testing and assess enterprise AI deployments.
• Partner with engineering to validate remediation and reduce recurrence.

Skills

Penetration testing

Application testing

Network testing

Vendor management

Cloud-native architectures

Education

BS/MS degree

Security certifications

Tools

AI/LLM tools

Job description

State Street Corporation is seeking a Senior Penetration Testing Engineer to join a top-tier Penetration Testing Team within Threat Intelligence and Assurance. The role is highly technical, hands-on, and focuses on applying rigorous testing approaches across complex systems in a regulated banking environment.

You will design, lead, and execute internal and third‑party testing for web, API, and network domains, while driving improvement in secure design and implementation.