Description
The Pismo Red Team is responsible for identifying and managing security risks and vulnerabilities across applications, APIs, cloud environments, and products.
As a Senior Red Team Analyst, you will leverage AI, automation, and offensive security techniques to improve assessment efficiency and strengthen security operations across mission-critical core banking and financial technology platforms.
Responsibilities:
- Penetration testing and security assessments
- API, web-application, and cloud security testing
- Vulnerability identification and risk management
- Security reviews of microservices and distributed systems
- Collaboration with engineering and cybersecurity teams
- Security findings reporting and remediation guidance
- AI-assisted security analysis and research
- Security automation and tooling development
- Security documentation and procedures maintenance
- Compliance support (PCI DSS, ISO 27001, etc)
- Threat research and offensive security techniques
- Stakeholder communication and security awareness
- Continuous improvement of Red Team processes and methodologies.
Qualifications:
- 5+ years of relevant work experience with a Bachelor's Degree or 2+ years of relevant work experience with an Advanced degree (e.g. Masters/MBA/JD/MD) or 0 years relevant work experience with a PhD.
- B1 English level for conversation.
- 3+ years experience working in offensive security, penetration testing or vulnerability assessment roles.
- Experience collaborating with development teams and cybersecurity squads to identify, communicate and remediate security findings.
- Basic understanding of application security risks across APIs, microservices, and distributed systems.
Technical skills:
- Strong automation and scripting skills, with experience developing tools, workflows, or processes that reduce manual effort and improve the scalability of security operations.
- Knowledge of OWASP Top 10 and NIST SP 800-115 security testing standards.
- Basic knowledge of PCI DSS requirements and experience working in regulated environments.
- Basic knowledge of AWS services and cloud environments.
This is a remote position.