Cyber Security Penetration Testing Lead

This is a fully remote position, open to applicants in Hungary.

📋 Description

• Oversee and manage enterprise penetration testing, security validation, and associated activities from the onboarding phase through to remediation and closure.

• Lead vulnerability and exposure management initiatives utilizing risk-based methodologies.

• Collaborate with solution owners, engineering teams, Cyber Operations, and remediation teams to expedite risk mitigation efforts.

• Organize reviews of security findings, conduct remediation workshops, facilitate risk acceptance discussions, and assess readiness for retesting.

• Monitor and communicate remediation progress, risk treatment strategies, service metrics, and KPIs to both technical and executive stakeholders.

• Handle exception requests, implement compensating controls, secure executive approvals, and document risks.

• Gather and maintain evidence necessary for audit, compliance, and risk closure obligations.

• Enhance vulnerability management, exposure management, and security validation capabilities.

• Contribute to strategic cybersecurity initiatives that bolster organizational visibility, risk prioritization, and overall security posture.

• Cultivate relationships across technical, operational, and leadership teams as a pivotal coordination point.

• Convert technical findings into significant discussions about business risk.

• Direct the operational management of penetration testing and security validation programs.

⛳️ Requirements

• Over 7 years of experience in cybersecurity, vulnerability management, exposure management, security operations, cyber risk management, or related fields.

• Deep understanding of Vulnerability Management (VM), Risk-Based Vulnerability Management (RBVM), exposure management, and remediation governance.

• Proven experience in coordinating penetration testing, security assessments, or other forms of security validation activities.

• Skill in evaluating and prioritizing vulnerabilities and security findings based on risk, exploitability, business impact, and threat intelligence.

• Background in partnering with application owners, infrastructure teams, Cyber Operations, and remediation stakeholders.

• Familiarity with cyber risk management frameworks, governance processes, and methodologies for validating security controls.

• Experience in managing remediation programs, tracking corrective actions, facilitating retests, and aiding in risk closure activities.

• Strong analytical and problem-solving abilities.

• Capability to translate technical findings into business-related risk discussions.

• Exceptional written and verbal communication skills.

• Experience in presenting cybersecurity risks, trends, and recommendations to senior stakeholders.

• Experience operating within large, complex enterprise environments with numerous stakeholders and competing priorities.

• Proven ability to lead cross-functional initiatives and drive process enhancements.

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field (preferred).

• Knowledge of exposure management, attack surface management, continuous security validation, or cyber risk quantification platforms.

• Experience with security validation tools, vulnerability platforms, and remediation orchestration technologies.

• Understanding of enterprise risk management, audit, regulatory, and compliance requirements.

• Experience in supporting executive reporting, operational metrics, and cybersecurity governance forums.

• Knowledge of cloud security platforms and contemporary application security practices.

• Experience collaborating with vulnerability scanners, penetration testing providers, and security assessment teams.

• Industry certifications such as CISSP, CISM, CRISC, Security+, GSEC, CGRC, or equivalent (preferred).

🏝️ Benefits

• Flexible and supportive work environment.

• Emphasis on well-being.

• Vibrant, hybrid-friendly culture.

• 'Be Well' programs promoting financial, mental, physical, and social health.

• Customized development goals and ongoing feedback.

• Access to advanced learning opportunities.

• Certifications available with Microsoft, Google, and Amazon.

• Coaching and practical experiences.

• Career development resources and training in in-demand skills.