Senior Remote Penetration Test Engineer

S&P Global; United States; Remote; USD 135,000 - 200,000; Full time

Benefits offered by this job

Health & Wellness

Flexible Downtime

Continuous Learning

Invest in Your Future

Family Friendly Perks

Beyond the Basics

Job summary

S&P Global is seeking a Lead Penetration Test Engineer to drive offensive security testing across web, cloud, and infrastructure environments. The role emphasizes hands-on testing, scripting, and collaboration with engineering teams to strengthen security controls.

You will lead tests, threat assessments, and attack simulations, and translate findings into actionable guidance for executives and technical stakeholders. Remote US/Canada options are supported.

Qualifications

• 8+ years in information security with focus on penetration testing and vulnerability management.
• Hands-on with tools and methodologies: OWASP Top 10, MITRE ATT&CK, PTES.
• Experience identifying and exploiting web app and infrastructure vulnerabilities (XSS, SQLi, IDOR).
• Scripting/programming: Bash, Python, PowerShell, Go, JavaScript.

Responsibilities

• Perform penetration tests on web apps, infrastructure, and cloud environments using manual and automated methods.
• Develop custom scripts/tools to enhance security testing in CI/CD pipelines.
• Lead vulnerability assessments, remediation planning, and risk reduction across lifecycles.

Skills

Penetration testing

Cloud security

Scripting

Offensive security certs

Reporting to execs

Education

Bachelor's degree

Tools

Burp Suite

Nessus

Metasploit

Nmap

Job description

S&P Global is seeking a Lead Penetration Test Engineer to drive offensive security testing across web, cloud, and infrastructure environments. The role emphasizes hands-on testing, scripting, and collaboration with engineering teams to strengthen security controls.

You will lead tests, threat assessments, and attack simulations, and translate findings into actionable guidance for executives and technical stakeholders. Remote US/Canada options are supported.