Device Testing

Device Testing Cybersecurity Jobs

3 jobs found

1mo ago

Senior Penetration Tester - Web & Hardware/IoT

JPMorganChase Chicago, IL

Chicago, IL

1mo ago Closed

$133k - $225k/yr Full time Senior Application Security Cloud Platforms

This position is no longer accepting applications (closed Sep 13, 2026).

Job Description

As an Assessments & Exercises Vice President, you will plan, execute, and report penetration tests for critical banking applications and platforms, with a primary focus on web, APIs, cloud, and related environments, and a limited scope extending to banking hardware and IoT endpoints. This onsite role is based in Chicago, IL.

Key Responsibilities

Plan, scope, and execute penetration testing engagements across web applications, APIs, cloud platforms, infrastructure, thick-client, and/or mobile applications, with a primary focus on thick-client and/or mobile application testing.
Conduct security assessments of banking hardware and connected/IoT technologies, including ATMs, Point of Sale (POS) devices, and other embedded endpoints.
Collect and validate engagement pre-requisites, including access, documentation, and approvals, and manage lab or onsite testing logistics and device access when applicable.
Carry out manual and automated testing to identify vulnerabilities, misconfigurations, and security weaknesses, using industry-standard tools and custom scripts.
Produce comprehensive penetration test reports that document technical details, risk assessments, and actionable remediation recommendations.
Perform peer reviews of penetration test reports to support accuracy, consistency, and quality of deliverables.
Partner with development, infrastructure, security, and device or product engineering teams to clarify findings, support remediation, and provide offensive security subject matter expertise.
Keep current on emerging threats, vulnerabilities, and attack techniques through threat intelligence, security research, and active participation in relevant industry groups.
Help improve penetration testing methodologies, tools, and frameworks to enhance effectiveness and alignment with firm strategy and regulatory requirements.

Required Qualifications

5+ years of hands-on penetration testing experience in offensive security, including demonstrated ability to scope, execute, and report on complex engagements.
Expertise in manual penetration testing of web, API, cloud (AWS/Azure/GCP), infrastructure, thick-client, and/or mobile (Android/iOS) applications, including use of industry-standard tools such as Burp Suite, Nmap, and Metasploit.
Working knowledge of testing approaches for connected devices/IoT and purpose-built banking devices (for example, ATMs and POS), including common attack surfaces such as exposed services, remote administration paths, authentication and authorization, hardening gaps, and insecure configurations.
Strong familiarity with security assessment methodologies including OWASP Top Ten and the NIST Cybersecurity Framework, along with other relevant standards.
Ability to identify and clearly articulate systemic security issues tied to threats, vulnerabilities, and risks, along with actionable remediation recommendations.
Strong organizational and communication skills, including capability to write detailed technical reports and present findings to both technical and non-technical stakeholders.
Experience conducting peer reviews of penetration test reports and mentoring junior testers.
A continuous learning mindset to keep up with the latest offensive security trends, tools, and techniques.

Technologies

Burp Suite
Nmap
Metasploit
OWASP Top Ten
NIST Cybersecurity Framework
AWS, Azure, GCP
Android, iOS

Preferred Qualifications

Knowledge of cybersecurity practices, operational risk management, and incident response methodologies within the US financial services sector, including relevant regulations, threats, and risks.
Proficiency in penetration testing and security concepts for both Windows and Unix-like operating systems.
Experience conducting security-focused source code reviews using languages such as Python, Java, and Rust.
Experience in reverse engineering thick-client and mobile applications to identify vulnerabilities.
Experience assessing embedded systems and IoT devices in lab or onsite environments, including device interface review, firmware/configuration analysis, and network or service exposure testing relevant to ATM/POS ecosystems.
Relevant certifications including OSWE, CREST (CRT, CCT), OSCP, OSCE, GXPN, GWAPT, GPEN, GMOB, or BSCP.

Location and Salary

Location: Chicago, IL (onsite)

Compensation: USD 133,000 - 225,000 per yearly

Additional Locations

This position is also open in:

New York, NY
Atlanta, FL
Plano, TX
Columbus, OH
McLean, VA
Wilmington, DE
Jersey City, NJ
Tampa, FL
Brooklyn, NY
Houston, TX
Washington, DC

Benefits

Base salary determined based on the role, experience, skill set, and location
Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation
Paid in the form of cash and/or forfeitable equity
Comprehensive health care coverage
On-site health and wellness centers
Retirement savings plan
Backup childcare
Tuition reimbursement
Mental health support
Financial coaching

Position Opening

This role requires a minimum of 5 years of relevant experience.

View full job page →

1mo ago

Penetration Tester III

SOSi Washington, DC

Washington, DC

1mo ago Closed

Full time Application Security Cloud Platforms Cybersecurity Tools

This position is no longer accepting applications (closed Aug 26, 2026).

Job Description

SOSi is seeking a Penetration Tester III to assess security across enterprise environments from an onsite location in Washington, DC.

Responsibilities

Execute targeted penetration tests across enterprise systems, applications, and network environments.
Lead and participate in red team engagements to evaluate controls and uncover exploitable gaps.
Maintain ongoing penetration testing programs to address evolving threats and vulnerabilities.
Evaluate security in IoT, mobile, and cloud platforms.
Contribute to High Value Asset security assessments.
Apply established methodologies and frameworks such as MITRE ATT&CK, OSSTMM, OWASP, NIST, PTES, and ISSAF.
Identify, document, validate, and report vulnerabilities with remediation recommendations.
Coordinate with security engineering, vulnerability management, and incident response teams to bolster defense operations.

Requirements

Five to seven years of hands-on penetration testing experience.
Management or team lead experience.
Experience delivering continuous penetration testing programs.
Experience conducting red team operations.
Experience performing IoT, mobile, and cloud penetration testing.
Experience supporting High Value Asset (HVA) assessments.
Experience applying MITRE ATT&CK, OSSTMM, OWASP, NIST, PTES, and ISSAF methodologies.
Bachelor’s Degree.
GPEN or GXPN certification.
CISA AES HVA Lead or Technical Lead, or the ability to obtain one of: GRTP, CRTL, OSCP, CRTP, CMWAPT, CEPT, CPT, LPT.
Active Secret clearance.

Technologies

MITRE ATT&CK
OSSTMM
OWASP
NIST
PTES
ISSAF

Company Description

SOSi, founded in 1989, is among the largest private, founder-owned technology and services integrators serving the defense and government services sector. The company delivers tailored solutions, proven leadership, and trusted results to enable national security missions worldwide.

Work Environment

Standard office conditions with potential duties at deployed locations. Core hours are Monday through Friday, 0600 – 1700. Some assignments may require evenings and weekends to meet program and contract needs.

Working at SOSi

All qualified individuals will receive consideration and will not be discriminated against for any reason.

View full job page →

2mo ago

Senior Penetration Tester - Web & Hardware/IoT

JPMorganChase Chicago, IL

Chicago, IL

2mo ago Closed

$133k - $225k/yr Full time Senior Api Testing Application Security

This position is no longer accepting applications (closed Aug 12, 2026).

Job Description

The Senior Penetration Tester will lead hands-on assessments for JPMorganChase across web, API, cloud, infrastructure, and limited banking hardware and IoT environments, overseeing planning, execution, reporting, and remediation guidance with stakeholders.

Responsibilities

Plan, scope, and execute penetration testing engagements across web applications, APIs, cloud platforms, infrastructure, thick-client, and mobile applications (primary focus).
Perform security assessments of banking hardware and connected/IoT technologies (limited but expected), including ATMs, POS devices, and other embedded endpoints.
Collect and validate pre-requisites for each engagement, ensuring access, documentation, and approvals are in place (including lab/onsite testing logistics and device access where applicable).
Perform manual and automated testing to identify vulnerabilities, misconfigurations, and security weaknesses, leveraging industry-standard tools and custom scripts.
Document and communicate findings through comprehensive reports with technical details, risk assessments, and actionable remediation recommendations.
Conduct peer reviews of penetration test reports to ensure accuracy, consistency, and quality of deliverables.
Collaborate with development, infrastructure, security, and device/product engineering teams to clarify findings, support remediation efforts, and provide subject matter expertise on offensive security.
Stay current with emerging threats, vulnerabilities, and attack techniques by leveraging threat intelligence, security research, and participation in relevant industry groups.
Contribute to the continuous improvement of penetration testing methodologies, tools, and frameworks to align with firm strategy and regulatory requirements.

Requirements

5+ years of hands-on penetration testing experience in offensive security, with a proven track record of scoping, executing, and reporting on complex engagements.
Expertise in manual penetration testing of web, API, cloud (AWS/Azure/GCP), infrastructure, thick-client, and/or mobile (Android/iOS) applications, including use of industry-standard tools (e.g., Burp Suite, Nmap, Metasploit, etc.).
Working knowledge of testing approaches for connected devices/IoT and purpose-built banking devices (e.g., ATMs, POS), including common attack surfaces such as exposed services, remote administration paths, authentication/authorization, hardening gaps, and insecure configurations.
Strong understanding of security assessment methodologies such as OWASP Top Ten, NIST Cybersecurity Framework, and other relevant standards.
Ability to identify and articulate systemic security issues related to threats, vulnerabilities, and risks, and provide clear, actionable remediation recommendations.
Exceptional organizational and communication skills, including the ability to write detailed technical reports and present findings to both technical and non-technical stakeholders.
Experience conducting peer reviews of penetration test reports and mentoring junior testers.
Continuous learner who keeps up with the latest offensive security trends, tools, and techniques.

Technologies

Burp Suite
Nmap
Metasploit
AWS
Azure
GCP
Android
iOS
Python
Java
Rust
Windows
Unix-like

Benefits

Base salary determined by role, experience, skill set and location
Commission-based pay and/or discretionary incentive compensation, paid in cash and/or forfeitable equity
Comprehensive health care coverage
On-site health and wellness centers
Retirement savings plan
Backup childcare
Tuition reimbursement
Mental health support
Financial coaching

Preferred Qualifications, Capabilities, and Skills

Knowledge of cybersecurity practices, operational risk management, and incident response methodologies within the US financial services sector, including relevant regulations, threats, and risks.
Proficiency in penetration testing and security concepts for both Windows and Unix-like operating systems.
Experience conducting security-focused source code reviews (e.g., Python, Java, Rust).
Experience in reverse engineering thick-client and mobile applications to identify vulnerabilities.
Experience assessing embedded systems / IoT devices in lab or onsite environments (e.g., device interface review, firmware/configuration analysis, and network/service exposure testing) relevant to ATM/POS ecosystems.
Relevant certifications such as OSWE, CREST (CRT, CCT), OSCP, OSCE, GXPN, GWAPT, GPEN, GMOB, or BSCP.

View full job page →

Device Testing Cybersecurity Jobs

Senior Penetration Tester - Web & Hardware/IoT

Penetration Tester III

Senior Penetration Tester - Web & Hardware/IoT

Get Device Testing Cybersecurity Jobs alerts