Penetration Tester

Responsibilities

• Plan, scope, and execute penetration testing engagements across web applications, APIs, cloud platforms (AWS/Azure/GCP), infrastructure, and mobile applications.
• Perform manual and automated testing to identify vulnerabilities and misconfigurations using industry-standard tools and custom scripts.
• Document findings through comprehensive technical reports including risk assessments and actionable remediation recommendations.
• Collaborate with development, infrastructure, and security teams to support remediation efforts and provide offensive security expertise.
• Conduct peer reviews of penetration test reports to ensure quality and consistency.
• Stay current with emerging threats and attack techniques through security research and threat intelligence.

Requirements

• 5+ years of hands-on penetration testing experience in offensive security.
• Expertise in manual penetration testing of web, API, cloud, infrastructure, and mobile applications.
• Proficiency with industry-standard tools such as Burp Suite, Nmap, and Metasploit.
• Strong understanding of security assessment methodologies including OWASP Top Ten and NIST frameworks.
• Exceptional technical report writing skills and the ability to communicate findings to both technical and non-technical stakeholders.

Preferred Qualifications

• Relevant industry certifications such as OSCP, OSWE, CREST, GXPN, GWAPT, GPEN, GMOB, or BSCP.
• Experience conducting security-focused source code reviews in languages like Python, Java, or Rust.
• Experience in reverse engineering thick-client and mobile applications.
• Knowledge of cybersecurity practices and operational risk management within the US financial services sector.

About the Company

Chase is a leading financial services firm, helping nearly half of America’s households and small businesses achieve their financial goals through a broad range of financial products. Our mission is to create engaged, lifelong relationships and put our customers at the heart of everything we do.