{"version":"0.1","company":{"name":"YubHub","url":"https://yubhub.co","jobsUrl":"https://yubhub.co/jobs/city/nj-virtual/"},"x-facet":{"type":"city","slug":"nj-virtual","display":"Nj - Virtual","count":1},"x-feed-size-limit":100,"x-feed-sort":"enriched_at desc","x-feed-notice":"This feed contains at most 100 jobs (the most recently enriched). For the full corpus, use the paginated /stats/by-facet endpoint or /search.","x-generator":"yubhub-xml-generator","x-rights":"Free to redistribute with attribution: \"Data by YubHub (https://yubhub.co)\"","x-schema":"Each entry in `jobs` follows https://schema.org/JobPosting. YubHub-native raw fields carry `x-` prefix.","jobs":[{"@context":"https://schema.org","@type":"JobPosting","identifier":{"@type":"PropertyValue","name":"YubHub","value":"job_da02e9e4-521"},"title":"Lead Penetration Test Engineer","description":"<p>We are seeking a Lead Penetration Test Engineer with extensive experience in penetration testing and offensive security. The ideal candidate will conduct penetration tests, re-testing, vulnerability scanning, and threat assessments across diverse environments.</p>\n<p><strong>Responsibilities and Impact:</strong></p>\n<ul>\n<li>Conduct comprehensive penetration testing of web applications, infrastructure, and cloud environments using both manual and automated techniques.</li>\n<li>Develop custom scripts, tools, and methodologies to enhance penetration testing capabilities and automate security testing within CI/CD pipelines.</li>\n<li>Apply cloud-specific offensive techniques, including IAM abuse, container and serverless exploitation, and cloud misconfiguration testing.</li>\n<li>Collaborate with engineering and development teams to analyze vulnerabilities, develop remediation plans, and strengthen application security across development and production lifecycles.</li>\n<li>Perform detailed security assessments using DAST, SAST, and SCA tools to ensure continuous validation and improvement of security controls.</li>\n<li>Lead and participate in attack simulations and tabletop exercises to validate security controls and improve organizational response capabilities.</li>\n<li>Research emerging threats, attack vectors, and adversarial techniques to inform offensive and defensive strategies.</li>\n<li>Partner with internal teams to design and execute threat assessments based on intelligence feeds and threat actor analysis.</li>\n<li>Communicate and present penetration testing and security assessment findings to both technical and non-technical stakeholders.</li>\n<li>Provide actionable remediation guidance and risk mitigation strategies to strengthen the organization’s overall security posture.</li>\n</ul>\n<p><strong>Requirements:</strong></p>\n<ul>\n<li>Minimum 8 years of experience in information security with a strong focus on penetration testing, application security, and vulnerability management.</li>\n<li>Hands-on experience with penetration testing tools (e.g., Burp Suite, Nessus, Metasploit, Nmap) and methodologies (e.g., OWASP Top 10, MITRE ATT&amp;CK, PTES).</li>\n<li>Expertise in identifying and exploiting common infrastructure and web application vulnerabilities (e.g., XSS, SQL Injection, IDOR).</li>\n<li>Familiarity with vulnerability classification and scoring frameworks (CVE, CVSS, CWE).</li>\n<li>Strong scripting or programming skills (e.g., Bash, Python, Go, PowerShell, JavaScript).</li>\n<li>Experience performing security assessments (DAST, SAST, SCA, credential scanning) and integrating security testing into CI/CD pipelines.</li>\n<li>Ability to translate complex technical findings into clear, actionable reports and confidently brief cross-functional teams and executives.</li>\n<li>At least one recognized offensive security certification (OSCP, OSCE3, OSEP, GXPN, GPEN, or CREST CRT/CCT).</li>\n<li>Bachelor’s degree in Computer Science, Information Systems, or a related field, or equivalent experience.</li>\n</ul>\n<p><strong>Benefits:</strong></p>\n<ul>\n<li>Health &amp; Wellness: Health care coverage designed for the mind and body.</li>\n<li>Flexible Downtime: Generous time off helps keep you energized for your time on.</li>\n<li>Continuous Learning: Access a wealth of resources to grow your career and learn valuable new skills.</li>\n<li>Invest in Your Future: Secure your financial future through competitive pay, retirement planning, a continuing education program with a company-matched student loan contribution, and financial wellness programs.</li>\n<li>Family Friendly Perks: It’s not just about you. S&amp;P Global has perks for your partners and little ones, too, with some best-in class benefits for families.</li>\n<li>Beyond the Basics: From retail discounts to referral incentive awards,small perks can make a big difference.</li>\n</ul>\n<p style=\"margin-top:24px;font-size:13px;color:#666;\">Job Data by <a href=\"https://yubhub.co\">YubHub</a>.</p>","url":"https://spgi.wd5.myworkdayjobs.com/en-US/SPGI_Careers/job/US---NJ---VIRTUAL/Lead-Penetration-Test-Engineer_330863-1","directApply":true,"hiringOrganization":{"@type":"Organization","name":"S&P Global","sameAs":"https://www.spglobal.com/","logo":"https://logos.yubhub.co/spglobal.com.png"},"x-apply-url":"https://spgi.wd5.myworkdayjobs.com/en-US/SPGI_Careers/job/US---NJ---VIRTUAL/Lead-Penetration-Test-Engineer_330863-1","x-work-arrangement":"remote","x-experience-level":"senior","x-job-type":"full-time","x-salary-range":"$135,000 USD – $200,000 USD","x-skills-required":["penetration testing","offensive security","cloud security","application security","vulnerability management","scripting","programming","security assessments","CI/CD pipelines"],"x-skills-preferred":["AI/ML security","adversarial testing","MITRE ATT&CK Framework","secure software development practices","Java application technologies"],"x-benefits":["health_insurance","paid_leave"],"x-licences":[],"x-visa-sponsorship":"unknown","x-visa-sponsorship-text":null,"x-work-authorisation":"required","x-work-authorisation-text":"This role is open only for candidates with indefinite right to work within the US.","datePosted":"2026-09-10T00:00:00.000Z","jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"NJ - VIRTUAL"}},"jobLocationType":"TELECOMMUTE","employmentType":"FULL_TIME","occupationalCategory":"Security","industry":"Technology","skills":"penetration testing, offensive security, cloud security, application security, vulnerability management, scripting, programming, security assessments, CI/CD pipelines, AI/ML security, adversarial testing, MITRE ATT&CK Framework, secure software development practices, Java application technologies","baseSalary":{"@type":"MonetaryAmount","currency":"USD","value":{"@type":"QuantitativeValue","minValue":135000,"maxValue":200000,"unitText":"YEAR"}}}]}