Penetration Testing Lead

This is a fully remote position, open to applicants in United States.

📋 Description

• Lead and conduct penetration testing assessments across network infrastructures, applications, APIs, and AWS cloud environments.

• Plan and implement red team exercises that mimic real-world adversary tactics, techniques, and procedures.

• Utilize NIST SP 800-115, MITRE ATT&CK, and DHS RVA standards while performing security assessments.

• Analyze testing outcomes, validate findings, evaluate business impacts, and deliver risk-based remediation recommendations.

• Maintain, configure, and enhance penetration testing tools, frameworks, and related technologies.

• Collaborate with teams in security, cloud, application development, and infrastructure.

• Assist in remediation efforts and bolster the organization’s overall security posture.

• Mentor and offer technical guidance to junior penetration testers.

• Assess emerging attack techniques, vulnerabilities, and offensive security tools.

⛳️ Requirements

• Must be a U.S. Citizen.

• Capable of obtaining and maintaining the necessary Public Trust level clearance.

• One of the following combinations of education and experience: Bachelor's Degree with 12 years of experience; Master's Degree with 10 years of experience; Associate's Degree with 14 years of experience; or High School Diploma or equivalent with 16 years of experience.

• Possession of one or more of the following certifications: OSCP, OSCE, GXPN, or CEH.

• Proven experience in conducting penetration testing across network infrastructures, web applications, APIs, and AWS cloud environments.

• Experience in planning and executing red team exercises, adversary emulation, and attack simulations.

• Solid understanding of NIST SP 800-115, MITRE ATT&CK, and DHS Risk and Vulnerability Assessment (RVA) standards.

• Experience in configuring, maintaining, and optimizing penetration testing tools, frameworks, and automated security validation platforms.

• Ability to identify and verify vulnerabilities, assess risks and potential business impacts, and communicate actionable remediation recommendations.

• Experience in mentoring junior penetration testers and providing technical support.

• Strong analytical, problem-solving, and technical documentation abilities.

• Preferred: Experience with automated penetration testing and security validation platforms such as Pentera, Cymulate, Picus Security, Intruder, or similar.

🏝️ Benefits

• Medical insurance.

• Dental insurance.

• Vision insurance.

• Life insurance.

• Health savings account.

• Short-term disability.

• Long-term disability.

• Employee Assistance Program (EAP).

• Parental leave.

• 401(k).

• Paid time off (PTO) for vacation.

• Company-paid holidays.

• Potential overtime eligibility.

• Potential shift differential.

• Discretionary bonus eligibility.