Penetration Tester

Join a team where your work protects critical network and cloud environments with real business and regulatory impact. Overview Our Penetration Tester is responsible for executing and coordinating ethical hacking to identify weaknesses and areas for improvement across BMO’s network, cloud, and AI technologies. This role delivers structured security testing projects, writes test reports, and advises on secure development practices. Core Responsibilities Report to the Sr. Manager of Network and Strategic Penetration Testing and assist with security testing activities. Assist in the delivery of security testing projects, including writing reports and managing the configuration and deployment of testing tools. Perform highly technical assessments of Active Directory, network infrastructure, cloud, and AI environments using manual, custom, and industry‑known attack methods. Provide technical leadership as a subject‑matter expert, including pre‑engagement scoping, engagement testing, and post‑engagement reporting. Mature testing team capabilities by developing reporting and remediation guidance that aligns with local and global regulatory requirements. Lead and mentor less experienced consultants, fostering development and skill growth. Collaborate with stakeholders to understand business goals and deliver actionable testing outcomes. Key Skills 3+ years of manual penetration testing of networks and cloud environments. Experience with Active Directory exploitation techniques. Strong proficiency with security testing tools and Linux distributions such as Kali. Deep practical knowledge of the Mitre ATT&CK framework. Ability to identify and exploit complex attack paths in AD and cloud workflows. Preferred certifications (OSCP, OSEP, HackTheBox, Cloud security certificates, etc.). Understanding of network and cloud architecture. Proficiency in at least one scripting language. Documentation skills for reproducible step‑by‑step findings. Knowledge of security testing for AI solutions and CI/CD pipelines is a plus. Qualifications Bachelor’s degree in Information Security, IT, Computer Science, Engineering, or related field (or equivalent experience). 4–7 years of relevant experience or advanced degree. Strong written and verbal communication skills for presenting technical findings to non‑technical audiences. Time‑management skills and ability to meet time‑sensitive deliverables. Ability to work remotely, independently, and take initiative. Understanding of industry standards and frameworks (NIST CSF, ISO 27001/27002, PCI DSS, etc.). Knowledge of business analysis, project delivery, and information security practices. Deep technical proficiency and problem‑solving ability within security risk management. Salary $88,800.00 – $165,600.00 Benefits Health insurance, tuition reimbursement, accident and life insurance, retirement savings plans, performance‑based incentives, discretionary bonuses, and other rewards. About Us At BMO, we are driven by a shared purpose: Boldly Grow the Good in business and life. We commit to supporting our team members with training, coaching, and growth opportunities. Equal Employment Opportunity BMO is proud to be an equal employment opportunity employer. We evaluate applicants without regard to race, religion, color, national origin, sex, gender identity or expression, sexual orientation, age, veteran or disability status, or criminal history, in accordance with applicable law. Contact For reasonable accommodations due to a disability, email View email address on click.appcast.io. #J-18808-Ljbffr