Mainframe and Web Application Security Senior Engineer - Senior Penetration Tester

Job Description

• Perform advanced black-box, grey-box, and assumed-breach penetration tests across enterprise z/OS mainframe environments, including USS, RACF/ACF2/Top Secret, CICS, IMS, Db2, MQ, JCL/JES2, TSO/ISPF, and network-facing services.
• Identify and validate vulnerabilities, attack paths, control weaknesses, misconfigurations, excessive access, insecure interfaces, exploitability, and business impact using manual techniques, custom scripting, and offensive tooling.
• Document, present, defend, validate, and retest findings with reproduction steps, evidence, impact statements, remediation recommendations, and audit support for PCI DSS and SOX.
• Improve penetration-testing methodologies, playbooks, tooling, automation, repeatable processes, and mainframe testing coverage; conduct peer reviews and mentor security professionals.
• Requires a bachelor’s degree or equivalent, at least 7 years of security engineering or related cybersecurity experience, deep penetration-testing and threat-modeling knowledge, and strong technical writing and communication skills.
• Based in Atlanta, GA (+4 others); remote work may be considered for well-qualified candidates outside the Truist footprint, with Eastern Standard Time support required. Salary: $140,000–$180,000 annually plus possible incentive pay.