Senior Cyber Security Application Penetration Testing Engineer
Wells Fargo6 days ago
Charlotte, NC, USA +2 moreSenior
Base Salary
$100k - $196k/yr
Responsibilities
- Lead or participate in research, analysis, design, testing, and implementation of computer network security and protection technologies.
- Conduct ethical penetration testing, create proof-of-concept exploits, identify vulnerabilities, and assess severity, impact, and exploitability.
- Perform penetration tests on networking devices, appliance products, and web-based applications.
- Develop custom penetration testing techniques and tools and support remediation discussions.
- Review security incident response activities and technical investigations related to information security incidents and breaches.
- Perform security risk assessments for compliance with corporate policies and security best practices.
- Use AI-enhanced security scanners and apply AI to accelerate defect identification and validation.
- Validate AI-assisted outputs while accounting for model limitations, security risks, and operational considerations.
- Ensure AI usage aligns with security, compliance, privacy, and ethical standards.
- Provide guidance, leadership, and mentorship to information security engineers interested in penetration testing and offensive security.
- Collaborate with peers, colleagues, and managers to resolve issues and achieve goals.
Requirements
- At least 4 years of cyber security research experience or equivalent demonstrated through work experience, training, military experience, or education.
- At least 4 years of web application penetration testing experience.
- At least 4 years of Dynamic Application Security Testing (DAST) experience.
- Advanced experience with DAST tools such as Invicti, Appscan, Webinspect, Fiddler, and Burp Suite.
- Advanced knowledge of application security and common vulnerabilities, including the OWASP Top 10.
- Experience with scripting and automation such as Python or Shell.
- Knowledge of security best practices and compliance standards such as PCI DSS and GDPR.
- Strong communication, collaboration, problem-solving, and analytical skills.
- Security certifications such as OSCP, BSCP, GWAPT, GPEN, GXPN, or equivalent are preferred.
Benefits
- Hybrid schedule with 3 days per week onsite/in the office and 2 days per week remote.
- Health benefits, 401(k) plan, paid time off, disability benefits, life insurance, critical illness insurance, and accident insurance.
- Parental leave and critical caregiving leave.
- Discounts and savings, commuter benefits, tuition reimbursement, scholarships for dependent children, and adoption reimbursement.
About Wells Fargo
Wells Fargo & Company is a U.S.-based financial services firm providing consumer and commercial banking, mortgages, credit, and wealth/investment services to individuals, small businesses, and enterprises. It earns revenue from interest income and fees across retail banking, payments, lending, and capital markets. Founded in 1852 and headquartered in San Francisco, it is publicly traded on the NYSE (WFC) and operates nationally with offices in multiple countries.