Lead Penetration Tester (Dep. Director)

Insight Assurance is considered one of the fastest-growing companies focusing on cybersecurity compliance. The company is a Florida-registered and licensed CPA firm, PCI Qualified Security Assessor (QSA), and ISO 27001 Certification Body founded by former Big-4 professionals (Former EY), looking to simplify the world of IT compliance. With over 20 years of professional experience working with hundreds of organizations from startups to Fortune 500 companies on a variety of engagements, the team at Insight Assurance partners with organizations looking to meet their organizational and compliance goals.JOB PURPOSE We are seeking a highly experienced and strategic Director of Penetration Testing to lead our penetration testing department. This leadership role is responsible for overseeing all aspects of the team’s operations, strategy, and technical delivery. The ideal candidate will bring over 5 years of professional experience in penetration testing, including at least 3 years in a leadership or managerial role. The Director will be responsible for building and mentoring a high-performing team, developing testing methodologies, ensuring service excellence, and aligning the team's objectives with broader organizational goals.KEY RESPONSIBILITIESStrategic & Team Leadership<ul data-start="992" data-end="1435"><li data-start="992" data-end="1122">Lead and manage the penetration testing department, including hiring, mentoring, performance management, and resource planning</li><li data-start="1123" data-end="1220">Define departmental goals and key performance indicators in alignment with company objectives</li><li data-start="1221" data-end="1337">Establish and continuously improve testing methodologies, quality assurance standards, and operational workflows</li><li data-start="1338" data-end="1435">Serve as the primary point of contact for executive leadership on penetration testing matters </li></ul>Technical Leadership & Execution<ul data-start="1476" data-end="1918"><li data-start="1476" data-end="1602">Oversee and participate in complex penetration tests on enterprise networks, systems, applications, and cloud environments</li><li data-start="1603" data-end="1696">Lead red team engagements, social engineering campaigns, and simulated real-world attacks</li><li data-start="1697" data-end="1780">Ensure technical accuracy and completeness of all team deliverables and reports</li><li data-start="1781" data-end="1918">Stay up to date with evolving threat landscapes, attack vectors, and security technologies to continuously innovate service offerings </li></ul>Stakeholder Communication<ul data-start="1952" data-end="2238"><li data-start="1952" data-end="2058">Deliver clear, impactful reports and presentations for both technical teams and executive stakeholders</li><li data-start="2059" data-end="2144">Translate findings into actionable recommendations and risk mitigation strategies</li><li data-start="2145" data-end="2238">Collaborate with IT, GRC, SOC, and security operations teams to guide remediation efforts </li></ul>Compliance & Risk<ul data-start="2264" data-end="2464"><li data-start="2264" data-end="2385">Ensure the team's activities align with industry standards and regulatory frameworks such as PCI-DSS, HIPAA, and NIST</li><li data-start="2386" data-end="2464">Develop, maintain, and enforce penetration testing policies and procedures</li></ul> REQUIREMENTSEducation & Experience<ul data-start="2518" data-end="3024"><li data-start="2518" data-end="2618">Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field</li><li data-start="2619" data-end="2752">At least 5 years of hands-on penetration testing experience, including web, network, social engineering, and red team assessments</li><li data-start="2753" data-end="2849">Minimum 3 years of experience managing or leading technical teams in a cybersecurity context</li><li data-start="2850" data-end="2943">Proven track record of successfully delivering enterprise-level security testing projects</li><li data-start="2944" data-end="3024">Experience with exploit development and advanced attack simulation is a plus </li></ul>Certifications (Required or Strongly Preferred)<ul data-start="3080" data-end="3168"><li data-start="3080" data-end="3099">OSCP (required)</li><li data-start="3100" data-end="3168">OSCE, OSWE, OSEP, or similar advanced certifications (preferred)</li></ul> TECHNICAL SKILLS<ul data-start="3197" data-end="3714"><li data-start="3197" data-end="3309">Expert-level knowledge of penetration testing tools (e.g., Metasploit, Burp Suite, OWASP ZAP, Cobalt Strike)</li><li data-start="3310" data-end="3433">Deep understanding of network protocols, operating systems (Windows, Linux), and cloud infrastructure (AWS, Azure, GCP)</li><li data-start="3434" data-end="3514">Strong command of scripting and programming (Python, Bash, PowerShell, etc.)</li><li data-start="3515" data-end="3577">Experience with risk analysis and vulnerability management</li><li data-start="3578" data-end="3714">Exceptional written and verbal communication skills, including the ability to write detailed technical reports for diverse audiences</li></ul> OTHER REQUIREMENTS<ul data-start="3745" data-end="4057"><li data-start="3745" data-end="3836">U.S. Citizenship or eligibility to obtain necessary security clearances (if applicable)</li><li data-start="3837" data-end="3878">Ability to travel up to 25% if needed</li><li data-start="3879" data-end="3978">Demonstrated leadership, strategic thinking, and ability to operate in a fast-paced environment</li><li data-start="3979" data-end="4057">High level of integrity and discretion when handling sensitive information</li></ul>Benefits -    Competitive Salary -    Flexible Paid Time Off and paid holidays -    Performance Bonuses -    Flexible remote work environment -    Opportunities for professional development and growth -    Supportive team culture   Privacy Notice CCPA: <ul><li style="font-style: italic;">Insight Assurance shares your personal data/information with Greenhouse recruiting because this is the tool we use for the recruitment process. </li><li style="font-style: italic;">Insight Assurance does not sell personal data/information under any circumstances. </li><li style="font-style: italic;">You may exercise your rights under personal data protection legislation by reaching out to us via: <a href="mailto:HR@insightassurance.com">HR@insightassurance.com</a> or submit a request via mail at 400 N Tampa St. 15th Floor Suite 122, Tampa, FL 33602</li></ul>Privacy Notice GDPR:This notice informs you about the categories of Personal Data/ Information and the Purpose and Scope of Processing Activities to be undertaken by Insight Assurance (we, us, our), under its job application and recruitment process.We resort to Greenhouse.com as the platform that supports our recruitment process, and therefore your Personal Data/ Information will be Processed on this tool (hosted, shared with, cross-referenced, accessed by our team); we have in place contractual terms and the commitment of Greenhouse.com that ensures the Security and Confidentiality plus Purpose limitation with regards to the Processing of your Personal Data.When you reply to one of your job postings, you voluntarily and freely submit your Personal Data to us; this, allied with the fact that the Processing by us (and over Greenhouse.com) of that Personal Data has the sole Purpose of validating your application and proceeding with the inherent scrutiny and decision, allows us to argue having Legitimate Interest as the applicable Legal Basis to undertake the Processing of your Personal Data under this scope.We are a U.S. based company, hence some or all Personal Data pertaining to you will be hosted in the U.S.The categories of Personal Data under Processing consist of:<ul type="disc"><li class="x_MsoListParagraph">Identification</li><li class="x_MsoListParagraph">Contact</li><li class="x_MsoListParagraph">Education and Professional</li><li class="x_MsoListParagraph">Interview performance</li><li class="x_MsoListParagraph">Evaluation</li></ul>You may exercise several Rights as determined under applicable Personal Data Protection legislation, in short:<ul type="disc"><li class="x_MsoListParagraph">Right of Access – meaning getting information about the Personal Data under Processing by us, except for the information you already know;</li><li class="x_MsoListParagraph">Right of Erasure – you may ask for us to erase all Personal Data pertaining to you under Processing; this may imply you being excluded from the recruitment process, for without information we cannot proceed with it;</li><li class="x_MsoListParagraph">Right of Opposition or Restriction of Processing – you may ask us to stop some Processing or restrict the Processing of some Personal Data, this may imply you being excluded from the recruitment process, at our sole discretion also for without information we cannot proceed with it;</li><li class="x_MsoListParagraph">Rectification – you can rectify your Personal Data at anytime </li></ul>

Lead Penetration Tester (Dep. Director)

USA Remote Jobs