Senior AI-Driven Penetration Platform Engineer - Banking and Capital Markets Exp plus || G.C / U.S.C
6+Months
DALLAS, TX/TAMPA, FL/NYC, NY (Hybrid)
W2 Only (No C2C) ::
Locations: Dallas/Irving, TX; Tampa, FL; New York City, NY (Hybrid: 3 days onsite per week; candidate selects site)
Engagement: Contract (minimum 6 months) with strong likelihood of extension based on performance
Industry: Financial Services; Banking and Capital Markets experience is a plus
Role Summary:
Lead the end-to-end engineering of a hybrid, AI-enabled penetration testing platform operating across cloud and on-prem environments. Own the full platform lifecycle—architecture, build, certification, integration, deployment, and ongoing operations—while integrating third-party security technologies and ensuring reliability, scalability, and compliance. Cloud-native engineering expertise is essential and non-negotiable.
Key Responsibilities:
- Architect, build, harden, and operate a hybrid AI-assisted penetration testing platform across AWS/Azure (Google Cloud Platform a plus) and on-prem infrastructure
- Integrate, orchestrate, and automate third-party security tools (SAST/DAST/SCA, vuln scanners, fuzzers, red-team tooling) and AI/ML-assisted capabilities for discovery, prioritization, and triage
- Implement infrastructure as code, configuration management, and CI/CD for repeatable, auditable deployments (e.g., Terraform, Ansible, GitHub Actions/Jenkins/GitLab)
- Containerize and operate workloads on Kubernetes; manage networking, policy, and image scanning at scale
- Develop APIs, workflows, and event-driven automations to run campaigns, schedule tests, and integrate with SIEM/SOAR, ticketing (Jira/ServiceNow), and collaboration tools
- Enforce platform security: RBAC/ABAC, secrets management, PKI/KMS, data encryption, network segmentation, zero trust controls
- Establish SLOs; implement monitoring/observability, logging, capacity planning, and cost optimization; lead incident response and root-cause analysis for platform issues
- Partner with Red Team, AppSec, Cloud, and Compliance to define test strategies, threat models, and operational runbooks; support audits and control evidence
- Manage vendor relationships, product evaluations, certification, and upgrades for third-party platforms
Required Qualifications:
- 7+ years of hands-on, closely related experience in penetration testing and/or enterprise security platform engineering (education, bootcamps, and certifications do not count toward the 7+ years)
- Strong cloud-native engineering experience in AWS and/or Azure (Google Cloud Platform a plus): VPC/VNet design, IAM, KMS, security groups/NSGs, load balancing, networking
- Expert-level Linux and networking (TCP/IP, DNS, TLS, proxies, firewalls); strong scripting/automation (Python, Bash; Go a plus)
- Proficiency with offensive security tooling and techniques: Burp Suite, Nmap, Metasploit, Cobalt Strike/Brute Ratel, fuzzers, Kali; enterprise vuln management (Tenable/Qualys); SAST/DAST/SCA; API and cloud pentesting
- Proven experience integrating and operating third-party security platforms at scale via APIs/webhooks; building resilient, automated pipelines
- Containerization/orchestration (Docker, Kubernetes) with image scanning, policy enforcement (e.g., OPA/Gatekeeper), and secure supply chain
- IaC and configuration management (Terraform, Ansible/CloudFormation) and CI/CD (GitHub Actions, GitLab CI, Jenkins); GitOps practices
- Security architecture and hardening; secrets management (e.g., HashiCorp Vault); zero trust; PKI and cert management
- Demonstrated ownership of platform SLAs, on-call participation, and production change management
- Excellent communication and stakeholder management across security, engineering, and compliance teams
Preferred Qualifications:
- Master’s degree in a technical field (distinct from work experience)
- Experience in Banking and Capital Markets or broader financial services; familiarity with relevant regulatory frameworks (e.g., SOX, PCI, FFIEC, NYDFS, SOC 2, ISO 27001)
- Experience applying AI/ML to security testing (LLM-assisted payload generation, deduplication/prioritization, vector stores, prompt safety/governance)
- SIEM/SOAR and EDR/XDR integrations (e.g., Splunk, Sentinel, QRadar, Chronicle; Cortex XSOAR, Palo Alto/XDR, CrowdStrike)
- Data protection: DLP, tokenization, HSMs, KMS
- Recognized certifications (OSCP, OSCE, OSEP, GPEN, GXPN, GWAPT, CRTO, CCSK, AWS/Azure security), valued but not a substitute for required experience
Work Model:
- Hybrid attendance required: 3 days/week onsite at one of the listed client offices (candidate’s choice)
Contract Term:
- Minimum 6 months with strong potential for extension based on performance and business needs
