Penetration Testing Manager – Senior Manager InfoSec

First Citizens Bank

. Lead a team of penetration testers in First Citizens Bank’s AppSec Testing Program .

Posted 11/2/2026full-timeRemote • United StatesSenior💰 $155,000 - $190,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in penetration testing strategy and program management, with a strong focus on vulnerability identification and remediation. Capable of leading teams, managing vendor relationships, and effectively communicating risks to stakeholders, including C-level executives.

Highest-signal resume keywords

Penetration Testing StrategyOWASP Top 10CISSP CertificationVendor ManagementData Analysis and Reporting

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Penetration TestingVulnerability ManagementSDLCAgentic PentestingPETS KnowledgeCREST Pentesting MethodologiesMetrics ReportingRisk CommunicationTechnical GuidanceTeam Performance Management

Soft Skills

LeadershipCommunicationCollaborationTraining and DevelopmentProblem-Solving

Certifications & Qualifications

CISSPCISMGPENGWAPTOSCPOSWA

Industry Keywords

Information SecurityCybersecurity StandardsAppSec TestingRisk AppetiteStakeholder Engagement

Tech Stack

Tools & technologies

Cyber SecuritySDLC

About the role

Key responsibilities & impact

Lead a team of penetration testers in First Citizens Bank’s AppSec Testing Program
Develop penetration testing strategy aligned with AppSec, Vulnerability Management, SDLC, and the bank’s risk appetite
Establish regular penetration testing cadence aligned with cybersecurity standards
Identify and complete penetration testing team improvement projects
Establish testing schedules and coordinate multiple teams
Identify and remediate schedule slippages
Manage staff performance, training, evaluations, and development plans
Manage vendors and procure tools and services
Provide expert technical guidance on penetration testing methodology and findings remediation
Partner with application teams, BISOs, GRC, and IT teams to close findings and document exceptions
Report metrics and analyze data to identify trends and issues
Communicate risks and data significance to stakeholders and C-level executives
Identify, classify, and report complex vulnerabilities in custom applications

Requirements

What you’ll need

Bachelor's Degree and 8 years' experience OR High School Diploma or GED/Equivalent and 12 years' experience in Information security or technology
At least one industry standard certification related to penetration testing and/or cybersecurity leadership (CISSP, CISM, GPEN, GWAPT, OSCP, OSWA)
Experience with agentic pentesting
Deep knowledge of the OWASP Top 10
Knowledge of Penetration Testing Execution Standard (PETS)
Knowledge of CREST Pentesting Methodologies
Expert penetration testing strategy and program management skills
Ability to manage staff performance, training, and evaluations
Ability to manage vendors and procure tools and services
Ability to analyze data and report metrics
Ability to communicate risk to varied audiences, including C-level executives
Ability to work in Information Security or technology

Benefits

Comp & perks

Variable incentives, bonuses, benefits, and/or other awards may be included in total compensation