Vulnerability & Pen-Testing Engineer — Threat Leader

Macy's; Johns Creek (GA); On-site; USD 170,000 - 210,000; Full time

Job summary

Macy's is seeking a Staff Vulnerability Engineer to lead penetration testing and vulnerability management across complex applications, OS, and networks. The role drives proactive assessment against real-world tactics, techniques, and procedures (TTPs) to strengthen Macy’s security resilience.

You will develop threat-based testing programs, mentor engineers, and collaborate with security and engineering teams to implement mitigations and improvements across cloud and on-prem environments.

Qualifications

• PhD or Master’s degree in a technical discipline preferred.
• AI, Cloud, or Cybersecurity certifications are a plus.
• 10+ years of experience in software engineering, cybersecurity, AI/ML, or related fields with production-scale deployments.

Responsibilities

• Establish a risk-based approach for evaluating and prioritizing new and emerging threats.
• Stay current on emerging technology trends and the threat landscape, providing subject matter knowledge on specific adversarial threats and risks to assist with mitigation strategies.
• Design, coordinate, and lead simulations based on organizationally defined threat scenarios.
• Participate in reviewing and developing security strategies, best practices, policies, and procedures.
• Provide leadership, share knowledge, and mentor team members.
• Build working relationships with Macy’s TMRC, leadership, and third parties to identify top threats.
• Develop standard Rules of Engagement for real-time testing.
• Document detailed findings, analysis, and recommendations.

Skills

AI & Machine Learning

Security Engineering

Cloud & Infrastructure

Threat Protection

Research & Innovation

Leadership & Collaboration

Communication

Education/Certifications

Experience

Education

PhD or Master’s degree in a technical discipline

Job description

Macy's is seeking a Staff Vulnerability Engineer to lead penetration testing and vulnerability management across complex applications, OS, and networks. The role drives proactive assessment against real-world tactics, techniques, and procedures (TTPs) to strengthen Macy’s security resilience.

You will develop threat-based testing programs, mentor engineers, and collaborate with security and engineering teams to implement mitigations and improvements across cloud and on-prem environments.