Senior Manager, Cyber Security (Penetration Testing, People Leader)

Description

The company's offensive security team lowers cyber risk by finding weaknesses in the enterprise environment through coordinated ethical hacking and penetration testing.

This team lead role works alongside team members to plan, run, and report on advanced ethical hacking exercises, finding vulnerabilities and lowering risk across enterprise systems.

The team sits within the Cyber Operations and Intelligence program and helps strengthen the company's defenses against a wide range of cyber threats and build strategies to address them.

Responsibilities

• Lead and oversee penetration tests of enterprise networks, services, applications, and infrastructure.
• Help shape a full penetration testing strategy that supports the organization's overall security goals.
• Review penetration test results and give stakeholders practical insights that drive remediation and improve security.
• Keep up with new threats and attack methods so the team's approach stays current and effective.
• Mentor and coach team members to grow their skills and lift the team's overall capability.
• Advise developers on remediation and security improvements across the software CI/CD pipeline.
• Explain technical findings and results clearly to varied audiences, including senior management and non-technical colleagues.

Requirements

• Bachelor's degree.
• At least 7 years of experience in cybersecurity or information technology.
• At least 6 years of experience evaluating, building, or supporting cybersecurity capabilities.
• At least 3 years of people leadership experience.
• At least 4 years of penetration testing experience.
• At least 2 years of experience with public cloud environments (AWS, Azure, GCP).
• At least 1 year of scripting in Python, Golang, or C.
• Preferred: 8+ years of security testing experience (red teaming, cloud security, application security, or network security).
• Preferred: 8+ years of experience with threat modeling concepts and frameworks (CVSS, MITRE ATT&CK, DREAD, or STRIDE).
• Preferred: experience developing offensive security tools.
• Preferred: experience with code review and secure coding standards.
• Preferred: OSCP, OSWA, OSWE, OSCE3, GPEN, GXPN, or CRTO certification.

Conditions

Hybrid role. You must follow the company's hybrid policy on required on-site presence at your assigned office.

The company will not sponsor new applicants for work authorization or provide any immigration-related support for this position, including H-1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN, E-3, O-1, or any other authorization that requires employer immigration support.

Full-time annual base salary ranges by location: McLean, VA: $229,900 - $262,400; New York, NY: $250,800 - $286,200; Richmond, VA: $209,000 - $238,500. All for Sr. Manager, Cyber Security. These cover work performed in those locations only, and the offer letter states the exact salary. Other locations follow the range for that location. Part-time pay is prorated to agreed hours.

Applications will be accepted for at least 5 business days.

No agencies. Equal opportunity employer (including disability and veteran status). Applicants with criminal histories are considered in line with applicable law.

Benefits

• Eligible for performance-based incentive pay, which may include cash bonuses and/or long-term incentives (LTI), discretionary or non-discretionary depending on the plan.
• Health, financial, and other benefits. Eligibility depends on full- or part-time status, exempt or non-exempt status, and management level.