Job Description

In this hybrid role based at our Chicago Headquarters, you will plan, execute, and report on penetration tests with a focus on web applications and web APIs across both internally developed and vendor SaaS solutions. Perform handson offensive security testing to identify, validate, and drive remediation of vulnerabilities in modern application and API architectures. Support targeted testing of related infrastructure, cloud services, and internal systems as needed. Work with software engineering, application security, and cyber threat mitigation teams to strengthen the organization’s overall security posture.Essential ResponsibilitiesPerform hands-on penetration testing with a primary focus on web applications and web APIs across homegrown and vendor systems, support testing of cloud, mobile, and internal systems.Conduct manual and automated testing, including authenticated and unauthenticated attack scenarios.Identify, exploit, and validate vulnerabilities, provide realistic assessments of risk and impact.Develop proofofconcept exploits and document attack paths when appropriate.Work with development teams to guide remediation efforts, provide recommendations, review fixes, validate resolutions, and retesting.Collaborate proactively with engineering through threat assessments, threat modeling, and “whatcouldgowrong” reviews before code is written.Analyze and prioritize vulnerability findings based on exploitability, severity, and business impact.Produce clear, actionable penetration test reports tailored for technical and nontechnical audiences.Present findings and trends to engineering teams, security leadership, and management.Contribute to improving internal testing methodologies, tooling, and standards.Stay current on emerging threats, attack techniques, and best practices relevant to modern web applications, APIs, and cloud environments.Education & Years of ExperienceMinimum - 4 Year Bachelors Degree in Computer Science, Cybersecurity, Information Systems or relatedMinimum - 3 Years of Penetration testing, offensive security or relatedIn Lieu of Education6 Years of Penetration testing, offensive security or relatedLicense/Certifications/TrainingPreferred: Industry certifications such as OSWE, OSCP, OSCE, GPEN, GWAPT, CRTO, or related offensive security credentialsCompensation & Benefits:Typical hiring range:‏‏‎ ‎ $92,600.00 to $144,100.00‎ Annually. Actual compensation will be determined using factors such as experience, skills & knowledge. ‎Benefits: Alliant provides a benefits package including health care, vision, dental, and 401k with employer match including:Annual performance bonusWork from home up to 3 days a weekPaid parental leaveEmployee discount programsTime off including paid personal and sick days11 paid holidays Education reimbursement*Note that eligibility and cost of benefits can vary depending on the number of regularly scheduled hours, and job status such as regular full-time, regular part-time, or temporary employment.Adhere to and ensure compliance of all business transactions with policy and process of the Bank Secrecy Act. Ensures compliance with all applicable state and federal laws, company procedures and policies. Maintains integrity and ethics in all actions and conversations with or regarding credit union members and their accounts; complies with Privacy Act directives. The responsibilities listed do not contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this position. Duties, responsibilities and activities may change at any time with or without notice.Job SummaryRequisition Number: SENIO001915Job Category: Risk/ComplianceSchedule: Full-Time

Job Tags

Similar Jobs