Senior security consultant focusing on mainframe penetration testing (z/OS), onsite in Minneapolis, MN.

Perform comprehensive penetration tests across networks, applications, platforms, and z/OS components, including CICS, IMS, and Db2.
Create and deliver clear, actionable penetration test reports to clients.
Collaborate with clients to develop remediation strategies that strengthen their security posture.
Research and develop innovative techniques, tools, and methodologies for penetration testing services.
Contribute to the ongoing development and enhancement of NetSPI services and processes, and participate in thought leadership via blogs, presentations, white papers, webinars, podcasts, vlogs, and tweets.
Provide pre-sales support by assisting with scoping prospective engagements.
Act as a technical resource for internal team members on in-depth questions or security best practices.
Lead QA activities within assigned service lines.
Other duties as assigned.

Bachelor’s degree or higher, with a focus on IT, Computer Science, Engineering or Math or equivalent experience.
3-5 years of experience in penetration testing, including network, web or thick client application, and operating system testing.
Experience with offensive toolkits used for network and application penetration testing.
Strong verbal and written communication skills.
Knowledge of z/OS fundamentals including, but not limited to: TSO, JCL, JES2, USS, Networking and at least one ESM (RACF, ACF2, Top Secret).
Programming experience in one or more of the following languages: Assembler, C, C++, REXX, Python.
Experience securing or managing z/OS-based systems.
Experience with pentesting frameworks or certifications such as PTAS, PTES, OSCP or other offensive security certifications.

Senior Security Consultant (Mainframe Penetration Tester)

Job Description