Senior Web Application Penetration Tester

This role offers a hybrid work schedule at our Wilmington, DE Tech Hub. Overview: Searches for application weaknesses that are exploitable, and partners with technology, cybersecurity, and risk teams to remediate any found weaknesses. Collaborates with technology teams when implementing new applications to help the team identify weaknesses before an attacker does. Primary Responsibilities: Complete penetration testing (primarily Grey & White Box testing) of web applications, Application Programming Interfaces (APIs), hardware, and mobile. Define testing methods to meet the scope and goals of assigned penetration tests. Gather intelligence to better understand how target works and its potential vulnerabilities. Understand breach and attack simulation solutions and work with the team to validate controls effectiveness. Document and formally report testing initiative findings. Maintain tools and scripts used in penetration testing and red team processes. Effectively educate and train Cybersecurity teams on new tactics, techniques, and procedures to ensure technology applications and services are not at risk of compromise or will leak information. Collaborate across Cybersecurity and Technology teams to leverage intelligence sources, identify new threats, improve tool usage and workflow, and mature monitoring and response capabilities. Identify areas of opportunities in daily tasks to advance penetration testing skills and regularly learn new tactics, techniques, procedures to assess risk and implement and validate controls as necessary. Understand and adhere to the Company’s risk and regulatory standards, policies, and controls in accordance with the Company’s Risk Appetite. Design, implement, maintain, and enhance internal controls to mitigate risk on an ongoing basis. Identify risk-related issues needing escalation to management. Promote an environment that supports belonging and reflects the M&T Bank brand. Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable. Complete other related duties as assigned. Scope of Responsibilities: Engages in regular interaction with middle management within Internal Audit, Compliance, Risk Management, and Technology. Determines and develops approach to solutions. Work is evaluated upon completion to ensure objectives have been met. Work is accomplished with periodic check-ins for alignment and limited direction. Basic knowledge of all penetration testing and red team tools. Strong knowledge of networking and network protocols. Intermediate working knowledge of operating systems and scripting and/or coding. Manager Responsibilities: No supervisory responsibilities. Education and Experience Required: Bachelor's degree and a minimum of 3 years’ relevant work experience, or in lieu of a degree, a combined minimum of 7 years’ higher education and/or work experience. Intermediate working knowledge of penetration testing and red team tools to be able to simulate attacker tactics, techniques, and procedures Strong knowledge of networking and network protocols Intermediate working knowledge of operating systems and scripting and/or coding Education and Experience Preferred: Bachelor’s degree in an applicable discipline such as Computer Science, Cybersecurity, or Information Technology Strong understanding of information security concepts (both technical and organizational requirements) Highly ethical and expected to maintain a level of professionalism at all times Intermediate working knowledge in social engineering, application security (web and mobile), physical methods, lateral movement, threat analysis, internal and external network architecture and a wide array of commercial and bring-your-own (BYO) products Prior experience with and demonstrable aptitude for quickly learning new technical skills Experience training others to ensure they have basic knowledge of and ability to use function-specific tools and systems Ability to analyze and draw conclusions based on quantitative data from multiple sources Penetration testing-specific or Cybersecurity domain-related industry-recognized certification #Hybrid #LI-JB3 M&T Bank is committed to fair, competitive, and market-informed pay for our employees. The pay range for this position is $106,700.00 - $177,900.00 (USD). The successful candidate’s particular combination of knowledge, skills, and experience will inform their specific compensation. Location Wilmington, Delaware, United States of America Great companies have an enduring sense of purpose. At M&T, our purpose is a simple one: make a difference in people’s lives and uplift the communities we serve. M&T Bank Corporation is a financial holding company headquartered in Buffalo, New York. M&T’s affiliates offer advice, guidance, expertise and solutions across the entire financial spectrum, combining M&T Bank’s traditional banking services with the wealth management and institutional capabilities offered by Wilmington Trust. M&T Bank has a network of over 1,000 branches and 2,200 ATMs that span 12 states from Maine to Virginia and Washington, D.C. For more than 165 years, M&T has strived to take an active role in our communities and build long-lasting relationships with our customers. We are a bank for communities—combining the capabilities of a large bank with the care of a locally focused institution. As an employer of choice, we are proud to offer competitive benefits ranging from medical and retirement to forty hours of paid volunteer time, each year. Our core values – integrity, ownership, collaboration, curiosity, and candor – drive the work we do. We seek to further build upon our record of success by bringing in top talent and fresh skill sets while continuing to support the growth and development of all our team members. View M&T’s Human Capital Report to learn more. Ready to join our team? Submit your application today! If you are unable to apply through this site due to technical issues or need an accommodation to apply, please contact us at [email protected] for assistance. M&T Bank is unwavering when it comes to providing equal employment opportunities to all employees and applicants without regard to race, color, national origin, religion, ethnicity, sex, gender identity, age, disability, citizenship, pregnancy, veteran status, military status, marital status, sexual orientation, genetic information or any other characteristic protected under applicable federal, state or local laws. M&T Bank Corporation has policies and procedures in place to promote a drug free workplace. Career Site Privacy Notice