Penetration Testing Manager

State Street

Manager of Penetration Testing Team leading rigorous security assessments in high-regulated financial environments. Responsible for team development, program evolution, and stakeholder collaboration to ensure effective risk reduction.

Posted 6/10/2026full-timeQuincy • Massachusetts, New Jersey • 🇺🇸 United StatesSeniorLead💰 $140,000 - $222,500 per yearWebsite

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Lead, mentor, and develop a team of penetration testers, fostering strong technical depth, hands-on expertise, and continuous skill development across application, network, and cloud domains.
Own and evolve the penetration testing program, including methodologies, tooling, quality assurance practices, reporting standards, and risk-based prioritization of testing activities.
Drive delivery of high quality, hands on testing across enterprise applications, APIs, infrastructure, and cloud environments, ensuring assessments are technically rigorous and aligned to real-world exploitability.
Establish and enforce engineering-centric testing standards, ensuring consistency, reproducibility, and depth across both internal and third-party executed assessments.
Oversee and coordinate testing performed by external providers, including scoping, execution expectations, and technical validation of results to ensure quality and accuracy.
Ensure regulator and audit ready outputs, including clear documentation, evidence-based findings, and reporting that ties technical vulnerabilities to business and risk impact.
Partner with engineering, infrastructure, and architecture teams to drive effective remediation, validate fixes, and improve secure design and development practices.
Integrate emerging technologies and techniques into the program, including AI/LLM-focused testing approaches and assurance of enterprise AI deployments (e.g., prompt injection, model abuse, data exposure).
Track, analyze, and communicate program metrics, including coverage, risk trends, vulnerability recurrence, and remediation performance, providing clear insights to senior leadership.
Continuously improve program maturity, balancing technical depth with scalability, consistency, and alignment to evolving threats, technologies, and regulatory expectations.

Requirements

What you’ll need

8+ years in offensive security with experience in high security/highly regulated environments; 2+ years leading teams preferred.
Deep expertise in network and application penetration testing, including enterprise attack paths and complex application ecosystems.
Strong knowledge of cloud, containerized environments, and identity-centric architectures.
Demonstrated ability to translate findings into actionable, risk-based remediation.
Strong stakeholder engagement and executive communication skills.
Prior successful experience working with technology owners and business unit leaders to reduce risk.
Nice to have: experience using AI/LLM tools to perform network and application penetration testing and configuration/security reviews.

Benefits

Comp & perks

health insurance
retirement savings plan (401K) with company match
insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages
paid-time off including vacation, sick leave, short term disability, and family care responsibilities
access to our Employee Assistance Program
incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans)
eligibility for certain tax advantaged savings plans

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

penetration testingnetwork penetration testingapplication penetration testingcloud securityrisk-based remediationvulnerability assessmentAI testing techniquesenterprise attack pathscontainer securityidentity-centric architecture

Soft Skills

leadershipmentoringstakeholder engagementexecutive communicationteam developmenttechnical validationprogram managementcontinuous improvementanalytical skillscollaboration