EcolabNYSE: ECL: Provides water, hygiene, and infection prevention solutions and services.
5+ YOEBachelor's degree,5+ years hands-on offensive/application/cloud/IoT security testing,experience with Azure/AWS/GCP,tooling familiarity,mentoring and reporting skills.
Louisville or New York City or Dallas or Charlotte or Tampa or Miami or Washington or Chicago or Boston or Atlanta or Nashville
$142k-$196k/yrRemoteFull Time
HumanaNYSE: HUM: Provides health insurance plans and clinical healthcare services.
6+ YOE6+ Mgmt6+ years in red team/penetration testing with leadership experience; production Python engineering; built or operated agentic AI/LLM applications; experience attacking AI/ML systems; production cloud experience (AWS, GCP, or Azure).
Python, PyRIT, Garak, MITRE ATLAS, OWASP Top 10 for LLM Applications, NIST AI Risk Management Framework, AWS, GCP, Azure, Hack The Box Pro Labs
Horizon3.ai: Autonomous penetration testing platform for continuous security assessment.
Extensive hands-on web application penetration testing experience, ability to reproduce and validate edge-case exploits, strong communication, proxy tool experience (Burp Suite), scripting (Python), and history of security research or bug bounty contributions.
Louisville or Charlotte or Tampa or Dallas or Washington or Chicago or Atlanta or New York City or Nashville or Miami or Boston
$118k-$162k/yrRemoteFull Time
HumanaNYSE: HUM: Provides health insurance plans and clinical healthcare services.
4+ YOE4+ years red-team/pen-test experience, production Python engineering, agentic AI/LLM tooling experience, AI adversarial testing, and production cloud experience (AWS/GCP/Azure).
Python, Cobalt Strike, Sliver, Mythic, EDR, XDR, NDR, DLP, MITRE ATT&CK, VECTR, Atomic Red Team, PyRIT, Garak, MITRE ATLAS, OWASP Top 10 for LLM Applications, NIST AI Risk Management Framework, Model Context Protocol (MCP), Hack The Box, AWS, GCP, Azure
Coinflow: Enables instant global payments using stablecoins and blockchain technology.
4+ YOE4+ years in security engineering or DevSecOps; hands-on offensive and defensive security; SIEM; code experience in TS/Node; vulnerability management; AI-native tooling.
Datadog, Splunk, Elastic, Panther, TypeScript, Node.js, Rust, Go, Python, Claude Security, Claude Code, SAST, DAST, CI/CD
Check Point Software TechnologiesNASDAQ: CHKP: Provides network, cloud, and mobile cybersecurity solutions.
Offensive security and red teaming experience, knowledge of LLM and agentic vulnerabilities, proficiency building automation tooling, client-facing assessment delivery, strong technical writing and communication.
OWASP Top 10 for LLM Applications, OWASP Top 10 for Agentic Applications, MITRE ATLAS, Model Context Protocol (MCP)
Chicago or Washington or Denver or Jersey City or Boston
$145k-$193k/yrOnsiteFull Time
Bank of AmericaNYSE: BAC: Provides banking, investment, and financial risk management services.
7+ YOE7+ years cybersecurity experience with hands-on AI/ML, agentic AI and LLM development, offensive/defensive security expertise, large-scale data and model deployment, and executive communication.
Azure AI Foundry, AWS Bedrock, GCP Vertex, PyTorch, TensorFlow, LangChain
Alliant Credit Union: Provides digital banking, consumer loans, and mortgage lending services.
3+ YOEBachelor's in CS/related or 6 years' equivalent; minimum 3 years penetration testing/offensive security; preferred offensive security certifications; strong communication and reporting skills.
Minneapolis or Atlanta or Cincinnati or Cupertino or Portland or New York or Chicago or Englewood or Charlotte or Irving
$133k-$157k/yrHybridFull Time
U.S. BankNYSE: USB: Provider of personal, business, and institutional financial services.
8+ YOEBachelor's degree or equivalent, 8+ years in information security with offensive security/Red Team experience; expertise in exploit development, offensive tooling, and scripting; strong communication and leadership.
Horizon3.ai: Autonomous penetration testing platform for continuous security assessment.
10+ YOE10+ years engineering or offensive security experience, hands-on OCI offensive security experience, strong cloud attack path knowledge, Python coding, web and cloud pentesting experience, strong research and documentation skills.
8+ YOE8+ years in information security focused on penetration testing, vulnerability management and application/cloud security; offensive security certification required; strong scripting skills and ability to communicate findings.
United States or Oak Brook or Los Angeles or Washington or Troy or New York City or Houston or Chicago or Grand Rapids or Owings Mills or Columbia or Richmond or Memphis or Raleigh or Boston or San Jose or San Francisco or Austin or Kalamazoo or Spokane or Denver or Fort Worth or Atlanta or Orlando or Dallas or Wilmington or Phoenix or San Antonio or Milwaukee or Madison or McLean or Melville or Woodbridge or Stamford or Philadelphia or Charlotte or Greenville or West Palm Beach or Costa Mesa or St. Louis or Fort Lauderdale or Seattle or Pittsburgh or Tulsa or Cincinnati or Cleveland or Columbus or Akron or Cherry Hill or Tampa or Minneapolis or Anchorage or Salt Lake City or Norfolk or Jacksonville or Boulder or Nashville or Las Vegas or Indianapolis or San Diego or Potomac or Baton Rouge or Omaha
$120k-$160k/yrOnsiteFull Time
BDO USA: Provides accounting, tax, and business advisory services to organizations.
4+ YOEFour or more years of hands-on penetration testing experience, strong Windows, Linux, networking, Active Directory, scripting, reporting, client communication, and offensive security tooling skills; high school diploma required.
Kali Linux, Nessus, Tenable, Nmap, Burp Suite, Metasploit, BloodHound, Microsoft 365, OWASP Top 10 for LLM Applications, Python, PowerShell, Bash, Git, GitHub Actions, Azure DevOps, Docker, GitHub, Microsoft Word, Microsoft Excel, Microsoft PowerPoint, Splunk, Microsoft Sentinel, GitHub Copilot, Claude Code, Microsoft Azure, AWS, SAML, OAuth 2.0, OpenID Connect, Kerberos, NTLM, TCP/IP, DNS, Windows, Linux
Aikido Security: Developer-first security platform for code, cloud, and runtime.
Strong infrastructure and networking fundamentals (Docker, DNS, TLS), Linux debugging, ability to read Go/TypeScript/Python, familiarity with enterprise networks, basic offensive security knowledge, strong communication; must live in Chicago.