Cybersecurity Red Team-Penetration Tester

%3Cp%3EZions Bancorporation is transforming what it means to work for a financial institution. With a commitment to technology and innovation, we have been providing our community, clients, and colleagues with the best experience possible for over 150 years. Help us transform our workforce of the future, today.%3C/p%3E%3Cp%3E%26nbsp;%3C/p%3E%3Cp%3EWe are seeking a highly skilled and driven %3Cstrong%3ECybersecurity Red Team-Penetration Tester%3C/strong%3E to join our offensive security team. In this role, you will think like an adversary to proactively identify, exploit, and help remediate complex security vulnerabilities across our enterprise infrastructure, applications, and cloud environments.%3C/p%3E%3Cp%3E%26nbsp;%3C/p%3E%3Cp%3ERather than just running automated scanners, you will design and execute sophisticated, real-world cyberattack simulations and manually dissect systems to identify deep-seated security flaws. As a critical partner to our Incident Response and development groups, your ultimate goal is not just to find weaknesses, but to collaboratively strengthen our overall security posture and educate internal stakeholders on emerging adversarial tactics.%3C/p%3E%3Cp%3E%26nbsp;%3C/p%3E%3Cp%3E%3Cstrong%3EKey Responsibilities%3C/strong%3E%3C/p%3E%3Cul%3E%3Cli%3E%3Cstrong%3EEmulate Advanced Adversaries:%3C/strong%3E Execute comprehensive red team operations and objective-based testing to simulate real-world cyberattacks, testing both technical controls and incident response capabilities.%3C/li%3E%3Cli%3E%3Cstrong%3EConduct Multidisciplinary Testing:%3C/strong%3E Perform manual and automated penetration testing across web applications, APIs, cloud environments (AWS/Azure/Kubernetes), internal/external networks, and operating systems (Windows, Active Directory, Linux).%3C/li%3E%3Cli%3E%3Cstrong%3EAudit and Attack AI Systems:%3C/strong%3E Design and execute adversarial simulations against Large Language Models (LLMs) and machine learning pipelines to identify enterprise vulnerabilities, verifying that deployed AI applications are resilient to manipulation and data exposure.%3C/li%3E%3Cli%3E%3Cstrong%3EDevelop Custom Exploits:%3C/strong%3E Design, write, and modify custom scripts and tools to bypass modern endpoint detection and response (EDR) agents and navigate restrictive environments.%3C/li%3E%3Cli%3E%3Cstrong%3EDeliver Clear Reporting:%3C/strong%3E Translate complex technical findings into detailed, actionable remediation reports and present risk impact clearly to both technical developers and non-technical stakeholders.%3C/li%3E%3Cli%3E%3Cstrong%3ECollaborate for Remediation:%3C/strong%3E Partner closely with Cyber Threat Intelligence, Incident Response, Detection Engineering and development groups to provide post-assessment debriefs, validate remediation efforts, and continuously strengthen the overall security posture.%3C/li%3E%3C/ul%3E%3Cp%3E%26nbsp;%3C/p%3E%3Cp%3E%3Cstrong%3EQualifications:%3C/strong%3E%3C/p%3E%3Cul%3E%3Cli%3E%3Cstrong%3EAdversarial Frameworks:%3C/strong%3E Deep practical knowledge of industry frameworks and standards, primarily the MITRE ATT%26amp;CK matrix, OWASP Top 10, and NIST.%3C/li%3E%3Cli%3E%3Cstrong%3EAI %26amp; LLM Vulnerability Exploitation:%3C/strong%3E Practical understanding of the OWASP Top 10 for LLMs and hands-on experience executing attacks such as prompt injection (direct and indirect), training data poisoning, model inversion, and API-based data exfiltration.%3C/li%3E%3Cli%3E%3Cstrong%3ECommercial %26amp; Custom Tooling:%3C/strong%3E Proficient hands-on experience with offensive security suites, including C2 frameworks (e.g., Cobalt Strike), proxy utilities (Burp Suite), scanners (Nessus, Nmap), exploitation platforms (Metasploit) and breach and attack simulation platforms (BAS).%3C/li%3E%3Cli%3E%3Cstrong%3EActive Directory Domain Dominance:%3C/strong%3E Proven experience exploiting AD environments, including Kerberoasting, AS-REP roasting, pass-the-hash, golden/silver ticket attacks, and domain delegation flaws.%3C/li%3E%3Cli%3E%3Cstrong%3EScripting %26amp; Automation:%3C/strong%3E Strong programming capability in languages such as Python, PowerShell, Bash, or Go to automate tasks and build custom tooling.%3C/li%3E%3Cli%3E%3Cstrong%3ECloud Security:%3C/strong%3E Experience identifying misconfigurations and exploiting cloud-native infrastructure within AWS, Microsoft Azure, or containerized environments (Kubernetes/Docker).%3C/li%3E%3Cli%3E%3Cstrong%3EProfessional Experience:%3C/strong%3E 5+ years of dedicated professional experience focusing on network penetration testing, application security testing, or red teaming.%3C/li%3E%3C/ul%3E%3Cul%3E%3Cli%3E%3Cstrong%3EEducational Background:%3C/strong%3E Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related field (or equivalent hands-on industry experience).%3C/li%3E%3Cli%3E%3Cstrong%3EIndustry Certifications (Highly Valued):%3C/strong%3E%3Cul%3E%3Cli%3E%3Cstrong%3EOSCP%3C/strong%3E (Offensive Security Certified Professional) or %3Cstrong%3EOSCE%3C/strong%3E / %3Cstrong%3EOSEP%3C/strong%3E%3C/li%3E%3Cli%3E%3Cstrong%3ESANS/GIAC%3C/strong%3E certifications (e.g., GPEN, GXPN, GWAPT)%3C/li%3E%3Cli%3E%3Cstrong%3EHTB Certified Penetration Testing Specialist%3C/strong%3E (CPTS)%3C/li%3E%3C/ul%3E%3C/li%3E%3C/ul%3E%3Cp%3E%26nbsp;%3C/p%3E%3Cp%3E%26nbsp;%3C/p%3E%3Cp%3E%26nbsp;%3C/p%3E%3Cp%3E%3Cstrong%3EWork Location:%3C/strong%3E%3C/p%3E%3Cp%3EThis position has a hybrid work from home schedule with a minimum of three days per week in the office at the new Zions Technology Center in Midvale, UT%3C/p%3E%3Cp%3E%26nbsp;%3C/p%3E%3Cp%3EThe Zions Technology Center is a 400,000-square-foot technology campus in Midvale, Utah. Located on the former Sharon Steel Mill superfund site, the sustainably built campus is the company’s primary technology and operations center. This modern and environmentally friendly technology center enables Zions to compete for the best technology talent in the state while providing team members with an exceptional work environment with features such as:%3C/p%3E%3Cp%3E%26nbsp;%3C/p%3E%3Cul%3E%3Cli%3EElectric vehicle charging stations and close proximity to Historic Gardner Village UTA TRAX station.%3C/li%3E%3Cli%3EAt least 75% of the building is powered by on-site renewable solar energy.%3C/li%3E%3Cli%3EAccess to outdoor recreation, parks, trails, shareable bikes and locker rooms.%3C/li%3E%3Cli%3ELarge modern cafe with a healthy and diverse menu.%3C/li%3E%3Cli%3EHealthy indoor environment with ample natural light and fresh air.%3C/li%3E%3Cli%3ELEED-certified sustainable building that features include the use of low VOC-emitting construction materials.%3C/li%3E%3C/ul%3E%3Cp%3E%26nbsp;%3C/p%3E%3Cp%3E%26nbsp;%3C/p%3E%3Cp%3E%3Cstrong%3EBenefits: %26nbsp;%26nbsp;%3C/strong%3E%3C/p%3E%3Cul%3E%3Cli%3EMedical, Dental and Vision Insurance - START DAY ONE! %26nbsp;%26nbsp;%3C/li%3E%3C/ul%3E%3Cul%3E%3Cli%3ELife and Disability Insurance, Paid Parental Leave and Adoption Assistance%3C/li%3E%3C/ul%3E%3Cul%3E%3Cli%3EHealth Savings (HSA), Flexible Spending (FSA), and dependent care accounts%3C/li%3E%3C/ul%3E%3Cul%3E%3Cli%3EPaid Training, Paid Time Off (PTO) and 11 Paid Federal Holidays%3C/li%3E%3C/ul%3E%3Cul%3E%3Cli%3E401(k) plan with company match, Profit Sharing, competitive compensation in line with work experience%3C/li%3E%3C/ul%3E%3Cul%3E%3Cli%3EMental health benefits including coaching and therapy sessions%3C/li%3E%3C/ul%3E%3Cul%3E%3Cli%3ETuition Reimbursement for qualifying employees%3C/li%3E%3C/ul%3E%3Cul%3E%3Cli%3EEmployee Ambassador preferred banking products%3C/li%3E%3C/ul%3E

If you are unable to access the Career Center, contact us at [email protected] for assistance.

 

Zions Bancorporation Current Employees: Click here to view Internal Job Opportunities

Job Details
hours per week: 40
Work Locations: Utah-Midvale-UT - Zions Tech Center, Information Security