Penetration Testing Lead

Job Description: - Lead and execute penetration testing assessments across network infrastructure, applications, APIs, and AWS cloud environments

• Plan and conduct red team exercises simulating real-world adversary tactics, techniques, and procedures
• Apply NIST SP 800-115, MITRE ATT&CK, and DHS RVA standards to security assessments
• Analyze testing results, validate findings, assess business impact, and provide risk-based remediation recommendations
• Maintain, configure, and optimize penetration testing tools, frameworks, and supporting technologies
• Collaborate with security, cloud, application development, and infrastructure teams
• Support remediation efforts and improve the organization’s overall security posture
• Mentor and provide technical guidance to junior penetration testers
• Evaluate emerging attack techniques, vulnerabilities, and offensive security tools

Requirements: - Must be a U.S. Citizen

• Ability to obtain and maintain the required Public Trust level clearance
• One of the following education and experience combinations: Bachelor's Degree and 12 years of experience; Master's Degree and 10 years of experience; Associate's Degree and 14 years of experience; or High School Diploma or equivalent and 16 years of experience
• One or more of the following certifications: OSCP, OSCE, GXPN, or CEH
• Demonstrated experience conducting penetration testing across network infrastructure, web applications, APIs, and AWS cloud environments
• Experience planning and executing red team exercises, adversary emulation, and attack simulations
• Working knowledge of NIST SP 800-115, MITRE ATT&CK, and DHS Risk and Vulnerability Assessment (RVA) standards
• Experience configuring, maintaining, and optimizing penetration testing tools, frameworks, and automated security validation platforms
• Ability to identify and validate vulnerabilities, assess risk and potential business impact, and communicate actionable remediation recommendations
• Experience mentoring junior penetration testers and providing technical guidance
• Strong analytical, problem-solving, and technical documentation skills
• Preferred: Experience with automated penetration testing and security validation platforms such as Pentera, Cymulate, Picus Security, Intruder, or similar

Benefits: - Medical insurance

• Dental insurance
• Vision insurance
• Life insurance
• Health savings account
• Short-term disability
• Long-term disability
• Employee Assistance Program (EAP)
• Parental leave
• 401(k)
• Paid time off (PTO) for vacation
• Company-paid holidays
• Potential overtime eligibility
• Potential shift differential
• Discretionary bonus eligibility