Senior Penetration Tester, Vice President (Open)

Job Summary Execute timely, thorough, time‑bound black/grey/white-box penetration testing of applications and infrastructure assets to identify exploitable vulnerabilities across MUFG assets. Mentor and train junior team members and peers. Prepare clear and concise reporting on issues found, including severity calculation, steps to reproduce, and mitigation/remediation recommendations. Qualifications and Education Bachelor’s degree in computer science or related field; applicable specialized training; or equivalent work experience. 5+ years of experience in application and infrastructure penetration testing, utilizing industry‑standard methodologies and security concepts such as OWASP and the MITRE ATT&CK framework. Operational experience in two or more of the following technology areas: network infrastructure (routers, switches), security products and services (FW, IDS, IPS, AV), Active Directory, servers, services, desktops and mobile devices, operating systems (Windows, Unix/Linux/AIX), databases (MySQL, SQL, DB2), and cloud and container technologies like AWS, Azure, Oracle and Kubernetes. Experience with programming languages including Java, C#, C, C++, Assembly (desired but not required). Experience with post‑exploitation, exploitation development, or binary reverse engineering. 3+ years of experience employing testing frameworks and tools such as Burp Suite, Metasploit, Cobalt Strike, Kali Linux, Nessus, PowerShell Empire, AutoSploit, Ghidra, IDAPro, OllyDbg, and Fiddler. 1+ years of experience in scripting languages such as Python, PowerShell, Bash, and/or Ruby (desired but not required). Excellent communication and report‑writing skills. Responsibilities Scope and perform penetration testing and vulnerability research of complex proprietary software and hardware for client services. Create custom tool(s) and/or modify existing tool(s) to aid with automation of vulnerability detection. Partner with infrastructure and application development teams at MUFG to ensure identified findings are understood and effectively mitigated or remediated in a timely manner. Continuously research new exploitation/attack techniques against the technology stack(s) currently being used across MUFG. Continuously develop your skills from various resources, including MUFG provided training. Maintain familiarity with industry trends and security best practices. Assist with the development of an internal training program for all levels of penetration testers to grow and develop the technical skills needed to be proficient. Provide technical training and guidance to junior and peer team members. Other Work onsite four days per week and remotely one day per week. Compensation Typical base pay range: New York / New Jersey: $144k – $194k; Non‑New York / New Jersey: $144k – $180k, depending on knowledge, skills, experience, and location. Eligible for discretionary performance‑based bonus and/or incentive compensation. Benefits Summary Comprehensive health and wellness benefits, retirement plans, educational assistance and training programs, income replacement for qualified employees with disabilities, paid maternity and parental bonding leave, paid vacation, sick days, and holidays. Equal Opportunity Employer We will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with applicable state and local laws. The Company is an Equal Opportunity Employer and does not discriminate on the basis of race, color, national origin, religion, gender identity, disability, or any other status protected under applicable law. #J-18808-Ljbffr MUFG Bank, Ltd.