Penetration Testing Lead - Vice President
HybridSecurity, Louisiana, United States
Job Summary
Facilitate, manage, and conduct red team and penetration testing efforts, including triaging vulnerabilities from security tools and performing manual and automated security testing of systems and network infrastructure. Mentor the team to elevate skills while ensuring stealthy testing that adheres strictly to rules of engagement and prevents unnecessary stress or damage. Coordinate penetration tests with third-party vendors by drafting requests for proposals, defining rules of engagement, and delivering detailed reports to C-level members and subject matter experts. Partner with the Detection Engineering Team for purple team exercises to configure intrusion prevention systems and signatures. Support the Penetration Testing Services globally, proactively investigate new risks, and strengthen the bank's security posture through continuous improvement.
Required Qualifications
- Bachelor of Information Technology, Computer Science, or similar
- Strong understanding of MITRE ATT&CK framework
- In-depth knowledge of network and web-based attacks
- Diligent, proactive, and strong attention to detail
- Ability to work with large datasets, multi-task, and effectively prioritize tasks
- Strong critical analysis and problem-solving abilities
- Strong interpersonal and communication skills (written and verbal)
- Ability to multi-task and remain productive in a service-driven and results oriented environment
- Demonstrated strong organizational, analytical, and problem-solving skills
- SMBC's employees participate in a Hybrid workforce model that provides employees with an opportunity to work from home, as well as, from an SMBC office
- SMBC requires that employees live within a reasonable commuting distance of their office location
Desired Qualifications
- CEH, OSCP, GPEN, GXPN, GWAPT certifications
- 7+ years of security, IT, compliance, audit, risk management, consulting, or application development experience
- CTF experience and writing penetration test reports describing exploit details and remediation plan(s)
- Experience writing scripts and automate processes is a plus (PowerShell & Python)
- Experience managing projects from initiation to closure
- Working knowledge of cloud technologies and containerized environments
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.