UNFI · 1 month ago
Senior Cyber Penetration Tester & Engineer
UNFI is looking for an experienced technical Cybersecurity Penetration Tester and Engineer Senior to help create a resilient food supply chain. The role focuses on performing threat emulations and identifying cybersecurity issues within the UNFI environment while collaborating with staff from other teams.
Food and BeverageHealth CareHospitalityOrganic Food
Responsibilities
Perform technical penetration testing of APIs, web applications, networks, cloud services, databases, directory services, and infrastructure. – 75%
Strategic attack simulation by analyzing UNFI’s internal and external attack surface and crafting bespoke penetration strategies. – 10%
Writing comprehensive reports outlining identified vulnerabilities, potential exploitation paths. Provide remediation guidance and recommendations from the assessments and support any security questions from network, system, and/or application owners. – 10%
Assess UNFI’s software development and cloud infrastructure from a security perspective and help drive internal security standards. – 5%
Qualification
Required
At least 1 industry leading or senior level cybersecurity penetration certification, for example: Offensive Security Certified Professional (OSCP), GIAC Penetration Tester Certification (GPEN), GIAC Web Application Penetration Tester (GWATP), GIAC Cloud Penetration Tester (GCPN) or EC-Council Licensed Penetration Tester (LPT) Master
Active GitHub repository account with examples of security tools, scripts, exploits developed OR evidence of past and current artifacts
8+ years of hands-on cybersecurity experience within IT environments
5+ years of experience performing penetration testing and vulnerability assessments
Advanced penetration testing skills across both tools and scripting abilities
Expertise with the following tools: various C2s, Burp Suite, Nmap, Wireshark, Bloodhound
Expertise with cybersecurity scripting in Python, PowerShell, or Go to manipulate vulnerabilities and demonstrate potential exploits
Ability to employ OSINT techniques to maximize attack vectors, simulating real-world cyber threats
Skills in developing implants and evading common security tools
Ability to critically examine an organization and system using knowledge of tactics, techniques, and procedures associated with malicious insider activity, organized crime groups, and both state and non-state sponsored threat actors
Knowledge of web application and cloud infrastructure best practices and understanding of how to exploit misconfigurations and vulnerabilities
Knowledge of network access, identity and access management, including public key infrastructure and understanding of how to exploit misconfigurations and vulnerabilities
Experience creating rules of engagement, test plans, scripts to aid testing efforts, and technical assessment reports that detail findings and remediation efforts
Ability to translate technical findings into actionable insights
Ability to mentor junior staff and transfer technical knowledge as well as contribute to the team's knowledge sharing
Benefits
Paid Time Off
Sick Time
Paid holidays and parental leave
401K Program
Medical, dental, vision, life, and accidental death/dismemberment insurance
Short-term and long-term disability insurance program
Flexible Spending Account and/or Health Savings Account
Company
UNFI
UNFI is North America’s Premier Food Wholesaler.
H1B Sponsorship
UNFI has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (6)
2024 (2)
2023 (4)
2022 (4)
Funding
Current Stage
Public CompanyTotal Funding
$507.1M2024-04-25Post Ipo Debt· $500M
2014-07-15Post Ipo Equity· $7.1M
1996-11-01IPO
Recent News
Digital Commerce 360
2025-12-17
San Gabriel Valley Tribune
2025-12-03
Company data provided by crunchbase