> Markdown version of [/jobs/ext/1974850-senior-security-engineer-penetration-tester](https://www.wearedevelopers.com/jobs/ext/1974850-senior-security-engineer-penetration-tester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Security Engineer - Penetration Tester

- **Company:** Truist Inc
- **Location:** Raleigh, NC, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Active Directory, Application Programming Interfaces (APIs), Artificial Intelligence, Software System Penetration Testing, Cyber Security, Mobile Application Software, Systems Development Life Cycle, Cloud Platform System
- **Published:** August 7, 2026
- **Apply:** https://us.experteer.com/career/view-jobs/senior-security-engineer-penetration-tester-raleigh-nc-usa-58837727

## About the Role

escalation and remediation planning * Collaborate with internal and external teams to improve coverage; stay current with attack techniques and trends * Contribute to AI security testing initiatives and security validation of AI models * Mentor junior security professionals; provide peer reviews and contribute to standards and playbooks * Support special projects and security initiatives aligned to expertise Tasks * Bachelor's degree or equivalent education, training, and work-related experience * Minimum 7 years in security engineering or related cybersecurity roles * Deep knowledge of cybersecurity principles, threat modeling, testing, and penetration testing * Experience implementing and managing complex information security technologies * Experience in SDLC security practices and articulating security risks to diverse audiences Key requirements * medical, dental, vision * life insurance * 401k plan * vacation and sick days * paid holidays * pension/RSUs/deferred compensation aaaa
in applicable

## Description

Experteer Overview In this role you build and lead offensive security testing across diverse tech domains, from AI systems to mainframes, helping protect critical business operations. You work with a high-performing team to shape testing methodologies, drive security capabilities, and stay ahead of adversaries. You will translate complex findings into actionable remediations and mentor others, contributing to a culture of excellence. This is a fast-paced, impactful role with opportunities to advance security capabilities at scale. Compensation / Benefits * Conduct penetration tests across enterprise and cloud environments, AI systems, APIs, mobile apps, Active Directory, and other assets * Simulate real-world attack techniques to identify vulnerabilities and misconfigurations * Validate remediation efforts and document risk-reducing findings * Maintain testing artifacts for regulatory and compliance purposes * Defend findings in discussions with teams and leadership; participate in escalation and remediation planning * Collaborate with internal and external teams to improve coverage; stay current with attack techniques and trends * Contribute to AI security testing initiatives and security validation of AI models * Mentor junior security professionals; provide peer reviews and contribute to standards and playbooks * Support special projects and security initiatives aligned to expertise Tasks * Bachelor's degree or equivalent education, training, and work-related experience * Minimum 7 years in security engineering or related cybersecurity roles * Deep knowledge of cybersecurity principles, threat modeling, testing, and penetration testing * Experience implementing and managing complex information security technologies * Experience in SDLC security practices and articulating security risks to diverse audiences Key requirements * medical, dental, vision * life insurance * 401k plan * vacation and sick days * paid holidays * pension/RSUs/deferred compensation (where applicable)


## Related Videos

- [Cloud Vendor Lock-In - Is it just a new version of the Database Abstraction Layers?](https://www.wearedevelopers.com/videos/1185-cloud-vendor-lock-in-is-it-just-a-new-version-of-the-database-abstraction-layers)
- [MCP Mashups: How AI Agents are Reviving the Programmable Web](https://www.wearedevelopers.com/videos/1392-mcp-mashups-how-ai-agents-are-reviving-the-programmable-web)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Hosting a modern justice system](https://www.wearedevelopers.com/videos/332-hosting-a-modern-justice-system)
- [Fault Tolerance and Consistency at Scale: Harnessing the Power of Distributed SQL Databases](https://www.wearedevelopers.com/videos/1146-fault-tolerance-and-consistency-at-scale-harnessing-the-power-of-distributed-sql-databases)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)