Mitsubishi - Tampa, FL
posted 3 months ago
We are seeking a Sr. Penetration Tester with extensive experience in whitebox assessment to join our growing team at Mitsubishi UFJ Financial Group (MUFG). This role is critical within our Enterprise Information Security organization, specifically on the Penetration Testing team. The ideal candidate will have over 5 years of Cyber Security experience, particularly focused on whitebox penetration testing. The successful candidate will be responsible for conducting assessments of applications and web APIs based on established security frameworks such as OWASP Top 10, SANS 25, and Mitre ATT&CK. They will also need to be proficient in reading complex code to identify exploitable vectors related to critical and high CVEs reported in major Java and .Net web frameworks. Additionally, the candidate should be capable of creating custom tools to assist in testing and process automation. In this role, the selected colleague will perform whitebox assessments on an ongoing and project basis, creating or modifying tools to enhance vulnerability detection automation. They will communicate closely with application managers and lead developers across various business lines to ensure a clear understanding of security findings, associated risks, and necessary remediation actions. The candidate will take the lead in identifying and evaluating application security issues as they arise, coordinating with key stakeholders to ensure timely mitigation and remediation. Continuous research on new exploitation and attack techniques relevant to the technology stacks used within the organization is also a key responsibility, along with maintaining familiarity with industry trends and security best practices. The candidate will contribute to the team's continuous improvement efforts, ensuring that security practices evolve alongside emerging threats.