Senior SME – Cloud, Application Security Testing & Penetration Testing

Job description

**Who We Are**

At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day.

So why work at Kyndryl?

We are always moving forward – always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.

**The Role**

Join Kyndryl as a Penetration Testing Associate and embark on an exhilarating journey where you'll wield your strategic vision and hands-on expertise to revolutionize our approach to cybersecurity.

As an integral part of our team, you'll take charge of the entire lifecycle of customer engagements, transforming the way we safeguard businesses in the digital realm.

At Kyndryl, we believe that staying ahead of the game is essential.

As a Penetration Testing Associate, you'll embark on an ongoing journey of discovery, continually learning and exploring new methodologies, staying abreast of the latest security threats, attack techniques, and tools.

We encourage and support your relentless pursuit of knowledge, because it is through your unyielding dedication that we can deliver unrivaled protection to our customers.

Join us now and let your passion for cybersecurity shine.

Together, we will set new standards, revolutionize the industry, and ensure the highest level of security for our customers.

Are you ready to make your mark as a Penetration Testing Associate at Kyndryl?

Your Future at Kyndryl
Every position at Kyndryl offers a way forward to grow your career.

We have opportunities that you won’t find anywhere else, including hands-on experience, learning opportunities, and the chance to certify in all four major platforms.

Whether you want to broaden your knowledge base or narrow your scope and specialize in a specific sector, you can find your opportunity here.

**Who You Are**

**Role Overview**

We are seeking a highly experienced Subject Matter Expert (SME) for application security testing with at Minimum 8+ years of experience to lead technical governance across cloud-based application security testing initiatives.

This role will oversee quality assurance, technical escalation, and alignment with enterprise security standards, ensuring robust and compliant penetration testing practices for web, mobile applications, and APIs hosted on cloud platforms.

**Key Responsibilities**

**Quality Assurance & Oversight**

+ Own the quality assurance process for all deliverables from testing team on ground.
+ Review and validate assessment test plans and final reports for completeness and accuracy.
+ Ensure high and critical findings are correctly identified and documented.
+ Evaluate test case coverage to ensure comprehensive security assessments across web, mobile apps, and APIs.

**Technical Leadership**

+ Act as the escalation point for complex technical issues and disputes.
+ Provide expert guidance on cloud-native application security testing and penetration testing methodologies.
+ Validate accuracy and testing coverage, specially for high and critical findings
+ Support on ground testing resources through targeted training and mentorship.

**Cloud Architecture Awareness**

+ Demonstrate deep understanding of how cloud services (IaaS, PaaS, SaaS) function behind applications.
+ Ensure testing strategies account for cloud-native components such as serverless functions, containers, API gateways, identity services, and storage configurations.

**Governance & Compliance**

+ Ensure all testing activities comply with industry standards such as OWASP, NIST, CSA, CIS Benchmarks, etc.
+ Maintain alignment with enterprise security policies and DevSecOps practices.
+ Liaise with enterprise security, DevSecOps, and cloud platform teams to ensure strategic alignment and timely resolution of issues.

**Stakeholder Engagement**

+ Serve as the central point of contact for customer escalations, including technical disputes, delays, and high-priority issues.
+ Collaborate with internal and external stakeholders to ensure governance objectives are met.

**Preferred Certifications**

+ OSCP – Offensive Security Certified Professional
+ CEH – Certified Ethical Hacker
+ CCSP – Certified Cloud Security Professional
+ GIAC GPEN / GWAPT / GCPN – GIAC Penetration Testing, Web App Pen Testing, Cloud Pen Testing
+ AWS Certified Security – Specialty, Azure Security Engineer Associate, or equivalent cloud platform certifications
+ At least one cloud certification is must

**Qualifications**

+ Bachelor's degree in Computer Science, Information Technology, or related field.
+ 8+ years of experience in cloud security, application security testing, and penetration testing.
+ Proven experience in testing web, mobile applications, and APIs hosted on cloud platforms.
+ Strong understanding of cloud architecture and services (AWS, Azure, GCP).
+ Familiarity with security frameworks (OWASP, NIST, CSA, CIS).
+ Experience in technical governance and quality assurance.
+ Excellent communication and stakeholder management skills.
+ Hands-on experience with security testing tools (e.g., Burp Suite, OWASP ZAP, Postman, Nessus, Metasploit).
+ Good communication skills and stakeholder management experience
+ Ability to work independently and manage multiple tasks simultaneously.
+ Strong analytical and problem-solving skills.
+ Excellent communication and teamwork abilities.

**Being You**

Diversity is a whole lot more than what we look like or where we come from, it’s how we think and who we are.

We welcome people of all cultures, backgrounds, and experiences.

But we’re not doing it single-handily: Our Kyndryl Inclusion Networks are only one of many ways we create a workplace where all Kyndryls can find and provide support and advice.

This dedication to welcoming everyone into our company means that Kyndryl gives you – and everyone next to you – the ability to bring your whole self to work, individually and collectively, and support the activation of our equitable culture.

That’s the Kyndryl Way.

**What You Can Expect**

With state-of-the-art resources and Fortune 100 clients, every day is an opportunity to innovate, build new capabilities, new relationships, new processes, and new value.

Kyndryl cares about your well-being and prides itself on offering benefits that give you choice, reflect the diversity of our employees and support you and your family through the moments that matter – wherever you are in your life journey.

Our employee learning programs give you access to the best learning in the industry to receive certifications, including Microsoft, Google, Amazon, Skillsoft, and many more.

Through our company-wide volunteering and giving platform, you can donate, start fundraisers, volunteer, and search over 2 million non-profit organizations.

At Kyndryl, we invest heavily in you, we want you to succeed so that together, we will all succeed.

**Get Referred!**

If you know someone that works at Kyndryl, when asked ‘How Did You Hear About Us’ during the application process, select ‘Employee Referral’ and enter your contact's Kyndryl email address.
Kyndryl is committed to creating a diverse environment and is proud to be an equal opportunity employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, pregnancy, disability, age, veteran status, or other characteristics.

Kyndryl is also committed to compliance with all fair employment practices regarding citizenship and immigration status.

Required Skill Profession

Other General