Cyber Security Application Penetration Testing Engineer
Wells Fargo — San Francisco, CA; Charlotte, NC; Chandler, AZ; Irving, TX
Posted: 2026-09-29
Job Description
• Full-time Cyber Security Application Penetration Testing Engineer role with Wells Fargo in a hybrid work arrangement: 3 days per week on-site/in office and 2 days remote, available in San Francisco, CA; Charlotte, NC; Chandler, AZ; or Irving, TX.
• Perform manual and automated penetration testing of web applications, mobile applications, and APIs; configure DAST tools; analyze scan results; and triage false positives.
• Produce detailed technical defect reports, support remediation discussions, collaborate with development and security teams, conduct peer reviews, and improve testing methodologies using industry standards and best practices.
• Requires 2+ years of Cyber Security Research, web application penetration testing, and Dynamic Application Security Testing (DAST) experience or equivalent demonstrated experience, training, military experience, or education.
• Desired qualifications include Invicti, Appscan, Webinspect, Fiddler, Burp Suite, Python or Shell, OWASP Top 10, PCI DSS, GDPR, and security certifications such as OSCP, BSCP, GWAPT, GPEN, or GXPN; salary is $87,000.00–$168,000.00 and the position is not eligible for Visa sponsorship.