Cybersecurity Red Team-Penetration Tester

Key Responsibilities

• Emulate Advanced Adversaries: Execute comprehensive red team operations and objective-based testing to simulate real-world cyberattacks, testing both technical controls and incident response capabilities.
• Conduct Multidisciplinary Testing: Perform manual and automated penetration testing across web applications, APIs, cloud environments (AWS/Azure/Kubernetes), internal/external networks, and operating systems (Windows, Active Directory, Linux).
• Audit and Attack AI Systems: Design and execute adversarial simulations against Large Language Models (LLMs) and machine learning pipelines to identify enterprise vulnerabilities, verifying that deployed AI applications are resilient to manipulation and data exposure.
• Develop Custom Exploits: Design, write, and modify custom scripts and tools to bypass modern endpoint detection and response (EDR) agents and navigate restrictive environments.
• Deliver Clear Reporting: Translate complex technical findings into detailed, actionable remediation reports and present risk impact clearly to both technical developers and non-technical stakeholders.
• Collaborate for Remediation: Partner closely with Cyber Threat Intelligence, Incident Response, Detection Engineering and development groups to provide post-assessment debriefs, validate remediation efforts, and continuously strengthen the overall security posture.

Qualifications

• Adversarial Frameworks: Deep practical knowledge of industry frameworks and standards, primarily the MITRE ATT&CK matrix, OWASP Top 10, and NIST.
• AI & LLM Vulnerability Exploitation: Practical understanding of the OWASP Top 10 for LLMs and hands-on experience executing attacks such as prompt injection (direct and indirect), training data poisoning, model inversion, and API-based data exfiltration.
• Commercial & Custom Tooling: Proficient hands-on experience with offensive security suites, including C2 frameworks (e.g., Cobalt Strike), proxy utilities (Burp Suite), scanners (Nessus, Nmap), exploitation platforms (Metasploit) and breach and attack simulation platforms (BAS).
• Active Directory Domain Dominance: Proven experience exploiting AD environments, including Kerberoasting, AS-REP roasting, pass-the-hash, golden/silver ticket attacks, and domain delegation flaws.
• Scripting & Automation: Strong programming capability in languages such as Python, PowerShell, Bash, or Go to automate tasks and build custom tooling.
• Cloud Security: Experience identifying misconfigurations and exploiting cloud-native infrastructure within AWS, Microsoft Azure, or containerized environments (Kubernetes/Docker).

Professional Experience

• 5+ years of dedicated professional experience focusing on network penetration testing, application security testing, or red teaming.

Educational Background

• Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related field (or equivalent hands-on industry experience).

Industry Certifications

• OSCP (Offensive Security Certified Professional) or OSCE / OSEPSANS/GIAC certifications (e.g., GPEN, GXPN, GWAPT)
• HTB Certified Penetration Testing Specialist (CPTS)

Work Location

This position has a hybrid work from home schedule with a minimum of three days per week in the office at the new Zions Technology Center in Midvale, UT. The Zions Technology Center is a 400,000-square-foot technology campus in Midvale, Utah. Located on the former Sharon Steel Mill superfund site, the sustainably built campus is the company’s primary technology and operations center.

Benefits

• Medical, Dental and Vision Insurance - START DAY ONE!
• Life and Disability Insurance, Paid Parental Leave and Adoption Assistance
• Health Savings (HSA), Flexible Spending (FSA), and dependent care accounts
• Paid Training, Paid Time Off (PTO) and 11 Paid Federal Holidays
• 401(k) plan with company match, Profit Sharing, competitive compensation in line with work experience
• Mental health benefits including coaching and therapy sessions
• Tuition Reimbursement for qualifying employees
• Employee Ambassador preferred banking products