Network Penetration Testing Lead

Cyber Security Testing Manager

Align testing strategy with business goals by translating drivers into technical solutions and capability recommendations. Gather requirements, assess capabilities, and provide recommendations and adoption strategies supporting security and business needs. Guide Cyber Security decisions related to network design, cloud adoption, threat modeling and new technology integration. Maintain continuous improvement practices to ensure resiliency and operational excellence across OCO testing functions. Administer, coordinate, and implement vendor and OCO testing processes, ensuring compliance with procedures and regulatory frameworks. Provide tactical and strategic recommendations supporting technology delivery that is agile, timely, cost‐effective, and risk‐appropriate. Guide the development of new processes, automation of controls, and enhancement of monitoring activities using data analytics. Lead cross‐functional OCO teams to deliver measurable reporting supporting the Cyber Security & Resiliency portfolio. Maintain relationships with partners across IT, business units, BISOs, ERMs, and other teams to ensure alignment and effective coordination Monitor industry trends, business developments, and emerging technologies to continuously mature the OCO program. Provide regulatory and policy compliance guidance to OCO teams and ensure consistent application of internal standards. Manage risk through procedural adherence, rapid issue resolution, and proper escalation/documentation of findings.

To succeed in this role, you should: Have at least seven (7) years of professional‐level experience in one or more technical disciplines, including Penetration Testing, Networking, Firewalls, Server Administration, Encryption, Cloud, Containers, Databases, or Software Development. Have at least two (2) or more years of experience as a penetration tester. Possess hands-on, expert‐level technical proficiency in at least one critical skill area, supported by relevant certifications. Hold (or be working toward) multiple professional or associate‐level certifications, such as CISSP, GCIH, MCSE, CCNP, RHCE, MPCE. Have obtained one penetration testing or red team certification, such as OSCP, CEH or GPEN. Demonstrate advanced understanding of adversarial tactics, techniques, and procedures (TTPs). Be proficient with multiple open‐source and commercial security tools (e.g., Nessus, Burp Suite, AppDetective, Metasploit, NMAP). Understand the strengths, weaknesses, configuration requirements, and troubleshooting needs of common security tools. Have strong proficiency working with both UNIX‐based and Microsoft operating systems, with deep systems engineering experience in at least one of them. Understand security guidelines such as NIST 800‐53 and NIST 800‐115. Demonstrate the ability to clearly articulate technical findings to both technical and non‐technical audiences. Strong understanding of IT network architecture and cyber security fundamentals, enabling effective guidance for product enhancements and new designs. Ability to engage across a wide range of technologies and stay informed about evolving trends to support aggressive testing schedules.

EEO: "Mindlance is an Equal Opportunity Employer and does not discriminate in employment on the basis of – Minority/Gender/Disability/Religion/LGBTQI/Age/Veterans."