Senior Security Engineer – Penetration Tester

Truist

Senior Security Engineer conducting offensive security testing for Truist, a financial services company. Testing AI, mainframe, cloud, web, infrastructure, and enterprise technologies to strengthen defenses.

Posted 8/5/2026full-timeAtlanta • North Carolina • 🇺🇸 United StatesSenior💰 $120,000 - $170,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in penetration testing, vulnerability assessment, and security engineering, with a strong focus on AI security testing and compliance within highly regulated industries. Capable of effectively communicating technical risks and collaborating across diverse teams to enhance security practices and methodologies.

Highest-signal resume keywords

Penetration TestingAI Security TestingVulnerability ResearchTechnical WritingCybersecurity Principles

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Penetration TestingVulnerability AssessmentThreat ModelingSecurity TestingScriptingAutomationOffensive Security Tool DevelopmentSoftware Development Lifecycle SecurityRisk AssessmentCompliance Documentation

Soft Skills

Analytical SkillsProblem-Solving SkillsCommunication SkillsCollaborationMentorship

Certifications & Qualifications

OSCP+OSEPOSEDOSEEOSWEOSWAOSAIGPENGWAPTCISSP

Industry Keywords

CybersecurityFinancial ServicesRegulatory ComplianceRed TeamingOffensive Security

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Conduct penetration tests against enterprise applications, infrastructure, cloud platforms, AI systems, APIs, mobile applications, Active Directory environments, and other technology assets
Simulate real-world attack techniques to identify vulnerabilities, attack paths, misconfigurations, and security weaknesses
Perform validation and retesting to verify remediation and confirm risk reduction
Document technical findings with reproduction steps, evidence, business impact, and remediation recommendations
Maintain testing artifacts and evidence for regulatory, audit, and compliance requirements
Defend findings with application teams, technology leaders, and stakeholders
Participate in escalation calls involving disputed findings, risk discussions, and remediation planning
Collaborate with internal and external testing teams to improve testing coverage and effectiveness
Contribute to AI security testing initiatives and emerging offensive security capabilities
Support AI model evaluation, testing, training, and security validation
Improve testing methodologies, automation, tooling, and operational processes
Perform peer reviews of penetration testing reports and deliverables
Provide technical guidance and mentorship to junior security professionals
Collaborate across security, engineering, development, infrastructure, application teams, and management
Assist with standards, procedures, playbooks, and testing documentation
Support special projects and security initiatives

Requirements

What you’ll need

Bachelor’s degree or equivalent education, training, and work-related experience
Minimum of 7 years of experience in security engineering or related cybersecurity roles
Deep specialized knowledge of cybersecurity principles, theories, and concepts
Proven experience in software development lifecycle security practices
Deep knowledge of threat modeling, security testing, and penetration testing
Experience implementing and managing complex information security technologies
5+ years of penetration testing, red teaming, offensive security, vulnerability research, or related cybersecurity experience
Experience with AI Security Testing and/or Mainframe Security Testing
Experience conducting penetration testing, red team, and security assessments across diverse environments and technologies
Experience with scripting, automation, and offensive security tool development
Strong technical writing and communication skills
Ability to articulate technical risks to technical and non-technical audiences
Ability to independently manage multiple engagements
Experience defending technical findings and participating in stakeholder discussions
Strong analytical and problem-solving skills
Banking, financial services, or highly regulated industry experience preferred
Relevant certifications such as OSCP+, OSEP, OSED, OSEE, OSWE, OSWA, OSAI, GPEN, GWAPT, GXPN, GRTP, GCFA, CISSP, CRIS, CPTS, or equivalent certifications may be held
English language fluency required
Applicant must have U.S. work authorization; Truist will not sponsor work visas or employment authorization

Benefits

Comp & perks

Medical insurance
Dental insurance
Vision insurance
Life insurance
Disability insurance
Accidental death and dismemberment coverage
Tax-preferred savings accounts
401k plan
At least 10 days of vacation during the first year of employment
10 sick days
Paid holidays
Defined benefit pension plan (depending on position and division)
Restricted stock units (depending on position and division)
Deferred compensation plan (depending on position and division)
Additional incentive pay