Senior Penetration Tester

Citizens Bank • Phoenix, AZ

248d • $130,000 - $150,000

About The Position

At our organization, we are committed to innovation and excellence. As part of our team, you'll have the opportunity to shape a rewarding career filled with impactful challenges. The Senior Penetration Tester will play a critical role in building and shaping our newly formed penetration testing team, bringing deep technical expertise and a collaborative mindset to establish a world-class program. This role focuses on hands-on penetration testing across diverse environments, including cloud (AWS, Azure, GCP), applications, networks, and endpoints, while contributing to the strategic development of the team's methodologies, tools, and processes. This position requires exceptional technical aptitude, a passion for identifying and exploiting vulnerabilities, and the ability to work closely with cross-functional teams to enhance the organization's security posture. The Senior Penetration Tester will deliver detailed findings and actionable recommendations, maintaining clear communication with technical teams, leadership, and compliance stakeholders.

Requirements

• 7+ years of cybersecurity experience, with at least 4 years focused on penetration testing across diverse environments.
• Proven expertise in testing cloud platforms (AWS, Azure, GCP), web/mobile applications, APIs, and network infrastructure.
• Advanced technical skills in scripting (Python, Bash, PowerShell) and hands-on use of tools like Burp Suite, Metasploit, Nmap, and Nessus.
• Experience contributing to or building a penetration testing program, including defining methodologies and workflows.
• Strong understanding of vulnerability management processes and frameworks (e.g., OWASP, NIST, CVSS, CWE).
• Excellent documentation skills, with the ability to produce clear, actionable reports for technical and executive audiences.
• Superior communication skills to collaborate with cross-functional teams and present findings to stakeholders.
• Demonstrated ability to mentor and guide junior team members.

Nice To Haves

• Familiarity with secure development practices and DevSecOps principles.

Responsibilities

• Conduct advanced penetration tests across cloud environments (AWS, Azure, GCP), web and mobile applications, APIs, networks, and endpoints to identify vulnerabilities and misconfigurations.
• Develop and execute custom exploits, scripts, and attack scenarios to simulate real-world threats.
• Collaborate with leadership to build and shape the new penetration testing team, defining methodologies, workflows, and standards.
• Mentor junior testers, fostering a culture of technical excellence, curiosity, and continuous learning.
• Maintain and enhance a penetration testing toolkit, including custom tools, scripts (Go, Python, Bash), and industry-standard platforms (e.g., Burp Suite, Nmap).
• Stay current with emerging vulnerabilities, exploits, and attack techniques to ensure cutting-edge testing practices.
• Produce detailed, high-quality reports with clear findings, risk assessments, and remediation recommendations for technical and non-technical audiences.
• Partner with application development, infrastructure, and security operations teams to prioritize and address vulnerabilities.
• Contribute to metrics and KPIs to demonstrate the impact of the penetration testing program.
• Establish repeatable, scalable testing processes aligned with frameworks like OWASP, NIST, PTES, and CVSS.
• Drive automation initiatives to enhance the efficiency and coverage of penetration testing activities.

Benefits

• Comprehensive medical, dental and vision coverage
• Retirement benefits
• Maternity/paternity leave
• Flexible work arrangements
• Education reimbursement
• Wellness programs
• Paid time off policy exceeds the mandatory, paid sick or paid time-away policy of very local and state jurisdiction in the United States.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Industry: Credit Intermediation and Related Activities
• Education Level: Bachelor's degree