Penetration Testing Engineer
Core
Penetration Testing Engineer supporting McKesson's Continuous Adversarial Testing (CART) program to strengthen enterprise application security posture through offensive security testing, AI-enabled assessments, and vulnerability validation.
Role type
Senior IC Penetration Testing Engineer (Offensive Security)
Builds
Autonomous security testing capabilities, AI-assisted penetration tests, and continuous adversarial testing workflows for enterprise web applications, APIs, and cloud environments.
Domain
Healthcare / Cybersecurity / Offensive Security
Required skills
Web application penetration testing, API security testing (REST, GraphQL), Cloud security assessments (AWS, Azure, GCP), Vulnerability validation, Attack path identification, Security automation, AI-assisted security tooling, Burp Suite, Nuclei, Nmap, Metasploit, Kali Linux
Preferred skills
AI-assisted security tools, Continuous security testing, Adversarial simulation, DevSecOps, OWASP Top 10, Red teaming, Cloud security architecture, Custom security scripts, Proof-of-concept exploits, Security program mentoring
Technologies
Burp Suite Professional, Nuclei, Nmap, Metasploit, Postman, Kali Linux, AWS, Azure, GCP, REST APIs, GraphQL, CI/CD pipelines
Responsibilities
Execute continuous AI-assisted penetration tests and validate findings from autonomous platforms, Implement and refine onboarding processes for security testing, Conduct adversarial assessments and identify complex attack paths, Partner with engineering teams to explain findings and validate remediation, Develop testing methodologies and automation workflows, Contribute to incident investigations and threat modeling
Seniority
Senior, hands-on IC
