Penetration Testing Engineer VP

What you'll do

• Lead end-to-end application penetration testing for web and API platforms, including scoping, exploitation, and retesting.
• Design and manage third-party network penetration tests by overseeing vendor selection, rules of engagement, and quality assurance.
• Perform advanced security testing on authentication, business logic, injection, API abuse, and cryptographic implementations.
• Establish and enforce standardized testing methodologies for internal teams and external vendors to ensure regulatory compliance.
• Conduct assurance testing on enterprise AI/LLM deployments to identify prompt injection, model abuse, and data exposure risks.
• Deliver regulator-ready reports that provide clear exploitability context and actionable remediation guidance.
• Partner with engineering teams to validate security fixes and improve secure system design and deployment practices.

What we're looking for

• 5+ years of experience in penetration testing within high-security or highly regulated environments.
• Deep expertise in application penetration testing for web, APIs, and mobile platforms.
• Solid understanding of enterprise network attack paths and modern architectures like cloud-native, microservices, and CI/CD pipelines.
• Experience managing third-party penetration testing vendors, including quality validation and outcome assurance.
• Ability to translate technical findings into actionable, risk-based remediation guidance for stakeholders.
• Experience using AI/LLM tools to perform network and application penetration testing and security reviews (preferred).
• BS/MS in a relevant field (preferred).
• OSCP/OSEP/OSWE, GPEN/GXPN, GWAPT, PNPT, GCPN, or similar certifications (preferred).