Lead and oversee penetration testing engagements across enterprise applications, systems, networks, cloud platforms, and other in-scope environments.
Define testing scope, methodology, and priorities based on business risk, threat intelligence, and organizational objectives.
Validate vulnerabilities and attack paths through manual testing, proof-of-concept development, and adversary emulation techniques.
Partner with engineering, infrastructure, and application teams to communicate findings, support remediation, and improve overall security posture.
Lead, mentor, and develop team members to strengthen offensive security capabilities and technical depth.
Establish and mature offensive security processes, methodologies, reporting standards, and quality controls.
Develop metrics and reporting to communicate testing coverage, findings trends, remediation progress, and program effectiveness to leadership.
Collaborate with cross-functional stakeholders to prioritize testing activities and support secure design and remediation efforts.
Develop or adapt proof-of-concept exploits to validate vulnerabilities and assess potential business impact.
Create repeatable assessment and reporting processes that support audit, compliance, and governance requirements.
Requirements
Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience; advanced degree preferred.
OSCP, OSEP, CRTP, CEH, CPT, CEPT, GPEN or other experienced industry standard penetration testing Certification(s) required.
7+ years of combined IT and security work experience with a broad range of exposure to systems analysis, application development, database design, networking, administration, identity, or other responsibilities preferred.
5+ years’ experience in information security required.