Lead Penetration Test Engineer

S&P Global is seeking a Lead Penetration Test Engineer to join their Security team. This hybrid role involves conducting comprehensive penetration tests, vulnerability assessments, and attack simulations across web applications, infrastructure, and cloud environments. You will develop custom tools, collaborate on remediation strategies, and research emerging threats to enhance the organization's security posture.

• Conduct penetration tests of web applications, infrastructure, and cloud environments
• Develop custom scripts and tools for security testing and CI/CD integration
• Perform cloud-specific offensive techniques and exploit common vulnerabilities
• Collaborate with engineering teams on vulnerability remediation
• Research emerging threats and adversarial techniques
• Communicate findings and provide actionable guidance to stakeholders