Cybersecurity Red Team-Penetration Tester

Zions Bancorporation•Midvale, UT

6d•Hybrid

About The Position

Zions Bancorporation is seeking a highly skilled and driven Cybersecurity Red Team-Penetration Tester to join their offensive security team. In this role, you will think like an adversary to proactively identify, exploit, and help remediate complex security vulnerabilities across the enterprise infrastructure, applications, and cloud environments. Rather than just running automated scanners, you will design and execute sophisticated, real-world cyberattack simulations and manually dissect systems to identify deep-seated security flaws. As a critical partner to the Incident Response and development groups, your ultimate goal is not just to find weaknesses, but to collaboratively strengthen the overall security posture and educate internal stakeholders on emerging adversarial tactics.

Requirements

Deep practical knowledge of industry frameworks and standards, primarily the MITRE ATT&CK matrix, OWASP Top 10, and NIST.
Practical understanding of the OWASP Top 10 for LLMs and hands-on experience executing attacks such as prompt injection (direct and indirect), training data poisoning, model inversion, and API-based data exfiltration.
Proficient hands-on experience with offensive security suites, including C2 frameworks (e.g., Cobalt Strike), proxy utilities (Burp Suite), scanners (Nessus, Nmap), exploitation platforms (Metasploit) and breach and attack simulation platforms (BAS).
Proven experience exploiting AD environments, including Kerberoasting, AS-REP roasting, pass-the-hash, golden/silver ticket attacks, and domain delegation flaws.
Strong programming capability in languages such as Python, PowerShell, Bash, or Go to automate tasks and build custom tooling.
Experience identifying misconfigurations and exploiting cloud-native infrastructure within AWS, Microsoft Azure, or containerized environments (Kubernetes/Docker).
5+ years of dedicated professional experience focusing on network penetration testing, application security testing, or red teaming.
Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related field (or equivalent hands-on industry experience).

Nice To Haves

OSCP (Offensive Security Certified Professional) or OSCE / OSEP
SANS/GIAC certifications (e.g., GPEN, GXPN, GWAPT)
HTB Certified Penetration Testing Specialist (CPTS)

Responsibilities

Execute comprehensive red team operations and objective-based testing to simulate real-world cyberattacks, testing both technical controls and incident response capabilities.
Perform manual and automated penetration testing across web applications, APIs, cloud environments (AWS/Azure/Kubernetes), internal/external networks, and operating systems (Windows, Active Directory, Linux).
Design and execute adversarial simulations against Large Language Models (LLMs) and machine learning pipelines to identify enterprise vulnerabilities, verifying that deployed AI applications are resilient to manipulation and data exposure.
Design, write, and modify custom scripts and tools to bypass modern endpoint detection and response (EDR) agents and navigate restrictive environments.
Translate complex technical findings into detailed, actionable remediation reports and present risk impact clearly to both technical developers and non-technical stakeholders.
Partner closely with Cyber Threat Intelligence, Incident Response, Detection Engineering and development groups to provide post-assessment debriefs, validate remediation efforts, and continuously strengthen the overall security posture.