Job Description

Every career journey is personal. That's why we empower you with the tools and support to create your own success story.

Be challenged. Be heard. Be valued. Be you ... be here.

Job Summary

​​The Security Testing Engineer will strengthen the organization's defenses by performing in-depth security testing across applications, networks, cloud environments, and infrastructure. The Engineer will identify vulnerabilities through ethical hacking, adversarial simulations, manual testing, and automated scanning, delivering clear, accurate reports to guide remediation. The role will configure and optimize testing tools, validate fixes, and collaborate with cross-functional teams to ensure security controls operate effectively. Responsibilities will include evaluating weaknesses such as SQL injection, insecure configurations, and authentication or authorization flaws. The Engineer will support proactive defense by tracking emerging threats, refining testing methods, and recommending improvements to reduce risk. This role will require strong cybersecurity knowledge, hands-on testing skills, and the ability to work with increasing autonomy while aligning with security standards.​

Essential Job Functions

• ​Perform security assessments and penetration tests using established tools and procedures, progressing toward independent execution. Analyze vulnerabilities, summarize findings, and recommend remediation to senior staff. Support implementation of fixes that strengthen system security and ensure compliance. - (20%)
• ​Collaborate with development and IT teams to embed security testing within the software development cycle, ensuring security is a core component of all stages, from design to deployment. - (20%)
• ​Support the development and maintenance of security testing tools and methodologies by implementing updates, following established best practices, and documenting changes. Assist in refining testing techniques by evaluating results and identifying opportunities to enhance the accuracy and effectiveness of security evaluations. - (20%)
• ​Analyze security incidents by reviewing test results, validating indicators of compromise, and assessing the incident's nature, impact, and scope. Develop clear incident reports that outline findings and propose practical remediation options to strengthen security controls and reduce the likelihood of recurrence​. - (20%)
• ​Monitor current security threats, trends, and technologies by reviewing threat intelligence sources and applying relevant updates to testing procedures. Implement approved security protocol updates and adjust testing approaches to address identified risks and support ongoing protection against emerging threats.​ - (20%)

Minimum Qualifications

• Bachelor’s Degree in Computer Science, or equivalent, relevant work experience
• 2+ years of experience in Cloud Security, App Security, IT Audit, Risk Management​.

Preferred Qualifications

• Master’s Degree in ​Cyber Security, or equivalent, relevant work experience
• Certified Information Systems Security Professional (CISSP) - International Information System Security Certification Consortium
• Certified Information Security Manager (CISM) Certification
• Certified Information Systems Auditor (CISA) - The Information Systems Audit and Control Association, Inc.
• CompTIA Security+ Certification
• AWS Certified Security Specialist
• Azure Security Engineer
• 4+ years of experience in Cloud Security, App Security, IT Audit, Risk Management​.

Skills

• Penetration Testing
• Vulnerability Assessments
• Security Incident Response
• Threat Modeling
• DevSecOps
• Application Security
• Dynamic Application Security Testing (DAST)
• Kubernetes

Reports To: Manager and above

Direct Reports: 0

Work Environment

• This is for the work environment section: Normal office environment.

Other Duties

This job description is illustrative of the types of duties typically performed by this job. It is not intended to be an exhaustive listing of each and every essential function of the job. Because job content may change from time to time, the Company reserves the right to add and/or delete essential functions from this job at any time.

About Bread Financial®

At Bread Financial, you’ll have the opportunity to grow your career, give back to your community, and be part of our award-winning culture. We’ve been consistently recognized as a best place to work nationally and in many markets and we’re proud to promote an environment where you feel appreciated, accepted, valued, and fulfilled—both personally and professionally. Bread Financial supports the overall wellness of our associates with a diverse suite of benefits and offers boundless opportunities for career development and non-traditional career progression.

Bread Financial® (NYSE: BFH) is a tech-forward financial services company that provides simple, personalized payment, lending and saving solutions to millions of U.S. consumers. Our payment solutions deliver growth for some of the most recognized brands in travel & entertainment, health & beauty, technology, electronics, jewelry, home and specialty apparel through our co-brand and private label credit cards and pay-over-time products providing choice and value to our shared customers. Additionally, we offer Bread Financial general purpose credit cards and saving products that empower our customers and their passions for a better life.

Bread Financial proudly marks 30 years of success in 2026. To learn more about our global associates, our performance and our sustainability progress, visit breadfinancial.com or follow us on Instagram and LinkedIn.

• All job offers are contingent upon successful completion of credit and background checks.
• Bread Financial is an Equal Opportunity Employer.

Job Family:

Technology

Job Type:

Regular