Senior Network and Cloud Penetration Tester

BMO U.S.

Senior Network and Cloud Penetration Tester at BMO leading security testing projects. Focused on deep, manual penetration testing for critical business systems.

Posted 7/31/2026full-timeRemote • Texas • 🇺🇸 United StatesSenior💰 $122,400 - $228,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Manual Penetration Testing, particularly within Active Directory and Cloud Environments, while applying risk-based methodologies to identify and remediate security vulnerabilities. Proficient in leading security testing operations and fostering the development of junior consultants through effective communication and technical leadership.

Highest-signal resume keywords

Manual Penetration TestingActive Directory VulnerabilitiesCloud Security TestingSecurity Testing ToolsMitre Attack Framework

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Manual Penetration TestingActive Directory EnvironmentsCloud EnvironmentsSecurity Testing ToolsLinux Distributions (Kali)Scripting Language ProficiencyRisk AssessmentVulnerability IdentificationCI/CD Pipeline Security TestingAI Security Testing

Soft Skills

Strong Written CommunicationStrong Verbal CommunicationTime ManagementSelf-Starter InitiativeLeadership

Certifications & Qualifications

OSCPOSEPHackTheBox Cloud Security Testing Certificates

Industry Keywords

Information SecurityInformation TechnologyInformation Systems ManagementSoftware DevelopmentRisk-Based Methodology

Tech Stack

Tools & technologies

CloudLinux

About the role

Key responsibilities & impact

Responsible for execution of security testing projects according to a structured process, to include writing test reports.
This may include oversight and/or execution of the configuration and deployment of security testing software and application of results to security analysis.
Assists with the execution of highly technical/analytical security assessments of Active Directory environments, network infrastructure, cloud environments, and AI technologies, including manual, custom and industry known attack methods using a risk-based intelligence-led methodology.
Identifies potential misuse scenarios.
Advises on secure development practices.
Provides technical leadership to business areas as a Security Testing subject matter expert.
Assists with efforts on the execution of security testing operations to include pre-engagement (scoping), engagement (testing) and post-engagement activities (reporting).
Works with management and peers to foster the development of less experienced Security Testing Consultants.
Works with leadership to mature security testing team capabilities including reporting and remediation guidance in alignment with local and global regulatory requirements.
Identifies security gaps and deficiencies by conducting risk assessments; able to recommend corrective action of identified vulnerabilities and weaknesses.
Assists with the execution of planning, testing, tracking, and advises on necessary risk acceptance for identified security risks.
Performs hands-on penetration testing for BMO overall and businesses/groups.
Liaises with stakeholders to understand problems and opportunities and enables BMO to meet its goals by understanding business vision, objectives and KPIs.
Develops and champions information security best practices, including staying abreast of industry information security and business trends through participation in professional associations.

Requirements

What you’ll need

Minimum of 5+ years experience with Manual Penetration Testing of Networks, and Cloud Environments.
Strong proficiency with Active Directory Environments and associated vulnerabilities and exploitation techniques
Deep experience with Cloud Environments and associated vulnerabilities in commonly used features utilized in large multi-tenant and hybrid enterprise environments
Strong proficiency with security testing tools and penetration testing Linux distributions such as Kali
Deep practical knowledge of applying the Mitre Attack framework
Strong experience Network and Cloud architecture understanding
Proficiency in at least one scripting language
Ability in documenting reproducible steps for technical accurate findings
Experience with security testing of agentic AI solution is a plus
Experience with security testing of CI/CD pipelines is a plus
Ability to identify and exploit vulnerabilities in Active Directory environments and Cloud workflows as well as multi-step attack paths.
5-8 years of experience in the areas of information systems, software development, and/or information security experience desired.
Strong written and verbal skills with the ability to present complex technical observations to a non-technical audience.
Good time management skills; the ability to commit and adhere to time-sensitive deliverables.
Ability to work remotely, with or without others, take direction, and be a self-starter that takes initiative.
Ability to lead conference calls, be the main point of contact, lead report generation activities, and be the main interface with internal teams on engagements.
Bachelor’s degree in Information Security, Information Technology, Information Systems Management, Computer Science, Engineering or related field(s) or equivalent demonstrated work experience.
Preference for candidates who have at least one certification in a related field, with strong preference for Information security certifications from a well-recognized institution (e.g. OSCP, OSEP, HackTheBox Cloud security testing certificates, etc)

Benefits

Comp & perks

Health insurance
Tuition reimbursement
Accident and life insurance
Retirement savings plans