Penetration Testing Engineer- VP
State Street20 hours ago
Base Salary
$120k - $203k/yr
Responsibilities
- Design and manage third-party network penetration tests, including scoping, vendor selection, rules of engagement, quality assurance, and result validation.
- Lead application penetration testing across web and API environments, including scoping, execution, exploitation, and retesting.
- Test authentication, authorization, business logic, injection, API abuse, cryptographic misuse, and access-control weaknesses.
- Establish and enforce penetration-testing standards for internal teams and external vendors.
- Produce regulator-ready reports describing exploitability, risk context, and remediation guidance.
- Lead AI/LLM-enabled testing and assurance testing of enterprise AI/LLM deployments.
- Partner with engineering and infrastructure teams to validate remediation and improve secure system design and deployment practices.
Requirements
- At least 5 years of penetration testing experience across application and network testing in high-security or highly regulated environments.
- Experience managing third-party penetration-testing vendors, including quality validation and outcome assurance.
- Deep application penetration-testing expertise across web, APIs, and mobile, plus a strong understanding of enterprise network attack paths.
- Strong knowledge of cloud-native architectures, microservices, identity platforms, and CI/CD pipelines.
- Ability to translate technical findings into actionable, risk-based remediation guidance and influence stakeholders.
- Experience using AI/LLM tools for network or application penetration testing and configuration or security reviews is preferred.
- A BS or MS in a relevant field is desired but not mandatory.
- Relevant certifications such as OSCP, OSEP, OSWE, GPEN, GXPN, GWAPT, PNPT, or GCPN are desired but not mandatory.
Benefits
- Hybrid schedule based on location.
- Retirement savings plan with 401K company match.
- Medical, dental, vision, life, disability, and other optional insurance coverage.
- Paid time off including vacation, sick leave, short-term disability, and family-care leave.
- Employee Assistance Program and eligibility for incentive compensation and certain tax-advantaged savings plans.
- Inclusive development opportunities, flexible work-life support, paid volunteer days, and employee networks.
Categories
About State Street
State Street is a global custodian bank and asset manager serving institutional investors with investment servicing, fund accounting, trading/FX, data, and index/active strategies. Its products include State Street Global Advisors’ funds and ETFs, the Charles River Investment Management Solution, and the front-to-back State Street Alpha platform. Founded in 1792 and headquartered in Boston, the company is publicly traded on the NYSE (ticker: STT) and operates across major markets worldwide.