Manager Ethical Hacking / Penetration Testing

Role summary

Manages, directs, or supervises staff responsible for conducting penetration testing of networks, systems, and application code to assess, verify, and improve the organization’s overall security posture. Oversees the planning and execution of penetration testing activities including research into product architecture, identification of risk areas, development of penetration test strategies, and validation of security controls. Ensures the team develops and applies advanced attack techniques to evaluate the effectiveness of existing protections and mitigations. Oversees the identification, documentation, and remediation recommendations for security vulnerabilities and coordinates with engineering, infrastructure, and application teams to address identified risks. Provides leadership, technical direction, and oversight of penetration testing initiatives while ensuring appropriate balance of internal expertise and specialized external resources when needed. Requires deep technical knowledge of application code, threat modeling, and risk assessment methodologies. This role focuses on advanced penetration testing and adversarial security assessment and is not a security policy compliance auditing function.

Job summary sourced from the Empsight benchmark job library.