Vice President, Penetration Testing Analyst

State Street

. Serve as the senior technical lead across the engagement lifecycle, including scoping, test planning, rules of engagement, execution oversight, and post-test remediation planning .

Posted 10/14/2026full-timeUnited StatesLead💰 $120,000 - $202,500 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive hands-on experience in offensive security, including advanced penetration testing and red teaming, with expert knowledge of Active Directory and cloud attack techniques. Proven ability to lead remediation validation efforts and communicate effectively with senior leadership.

Highest-signal resume keywords

Offensive Security ExpertiseActive Directory Attack PathsCobalt Strike ProficiencyMITRE ATT&CK KnowledgeExecutive-Level Communication

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Advanced Penetration TestingRed TeamingScripting with PythonScripting with PowerShellRemediation ValidationScenario-Based Test DesignCloud Attack TechniquesPrivilege EscalationLateral MovementEDR Evasion

Soft Skills

DiscretionSound JudgmentMentoring

Tools & Technologies

Cobalt StrikeBloodHoundMimikatzMetasploitKali Linux

Certifications & Qualifications

OSCPOSEPOSCE3CRTOGXPN

Industry Keywords

Offensive SecurityCybersecurityEngagement LifecycleDetection EngineeringGovernance Forums

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityLinuxPython

About the role

Key responsibilities & impact

Serve as the senior technical lead across the engagement lifecycle, including scoping, test planning, rules of engagement, execution oversight, and post-test remediation planning
Provide real-time technical guidance during engagements by assessing tester activity, judging operational risk, and guiding escalation decisions
Challenge external testing providers on attack paths, evidence quality, severity ratings, and MITRE ATT&CK mapping
Coordinate with finding owners and engineering teams to define technical remediation requirements and measurable validation criteria
Lead remediation validation by grouping related findings, defining test criteria and expected outcomes, and retesting fixes against original and variant attack paths
Assess remediation across the wider estate, including implementation consistency and new exposure introduced by fixes
Make final technical calls on closure recommendations and produce evidence-based reporting with executive summaries
Present testing and validation outcomes to senior leadership and governance forums
Design and lead targeted TTP assessments and collaborative purple team exercises
Feed detection and control gaps to Detection Engineering, Assurance, and Security Operations and track improvements through validation
Provide offensive security support to partner teams and help mature internal testing methods, plans, evidence standards, and lessons-learned practices
Mentor team members and partners

Requirements

What you’ll need

Extensive hands-on experience in offensive security, such as advanced penetration testing, red teaming, or adversary simulation
Expert-level practical knowledge of Active Directory and Entra ID attack paths, privilege escalation, lateral movement, credential abuse, EDR evasion, and cloud attack techniques across Azure and AWS
Advanced proficiency with offensive tooling and C2 frameworks, including Cobalt Strike, BloodHound, Mimikatz, Metasploit, and Kali Linux
Scripting experience for custom tooling and automation using Python, PowerShell, or similar
Proven record of leading remediation validation for complex findings
Deep working knowledge of MITRE ATT&CK, scenario-based test design, and measuring detection and response capabilities
Experience directing and challenging third-party testing providers
Executive-level written and verbal communication skills
Discretion and sound judgment when handling sensitive, confidential engagement information
Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience
10 or more years of related experience
Industry-recognized offensive security certification such as OSCP, OSEP, OSCE3, CRTO, GXPN, or equivalent
Experience supporting large-scale remediation validation programs is strongly preferred

Benefits

Comp & perks

Retirement savings plan (401K) with company match
Basic life insurance
Medical insurance
Dental insurance
Vision insurance
Long-term disability insurance
Optional additional insurance coverages
Paid vacation
Paid sick leave
Short-term disability
Family care responsibility leave
Employee Assistance Program
Incentive compensation, including eligibility for annual performance-based awards
Eligibility for certain tax-advantaged savings plans
Inclusive development opportunities
Flexible work-life support
Paid volunteer days
Employee networks