Manager Offensive Cybersecurity / Penetration Testing

About the role

Robert Half is hiring a Manager of Offensive Cybersecurity / Penetration Testing for the Enterprise Information Security team in San Ramon. The manager leads and matures the organization's offensive security capabilities, overseeing penetration testing across applications, infrastructure, networks and cloud environments, validating security weaknesses and improving testing processes, automation and operational maturity.

Key responsibilities

• Lead and oversee penetration testing engagements across enterprise applications, systems, networks, cloud platforms and other in-scope environments.
• Define testing scope, methodology and priorities based on business risk, threat intelligence and organizational objectives.
• Validate vulnerabilities and attack paths through manual testing, proof-of-concept development and adversary emulation.
• Partner with engineering, infrastructure and application teams to communicate findings, support remediation and improve the security posture.
• Mentor and develop team members, and establish offensive security processes, reporting standards and quality controls.
• Develop metrics and reporting on testing coverage, findings trends, remediation progress and program effectiveness.
• Create repeatable assessment and reporting processes supporting audit, compliance and governance.

Required profile

• Bachelor's degree in Computer Science, Information Security or a related field, or equivalent practical experience; advanced degree preferred.
• 5+ years of information security experience and 3+ years performing penetration testing.
• 7+ years of combined IT and security experience, with broad exposure to systems analysis, application development, database design, networking and administration preferred.
• Experience leading penetration testing programs or engagements in a large enterprise environment.
• Ability to analyze and scope vulnerability disclosures and CVEs, and to present technical findings to technical and non-technical audiences.

Required skills

• Penetration testing certification (e.g., OSCP, OSEP, CRTP, CEH, CPT, CEPT, GPEN).
• OWASP expertise and knowledge of Active Directory discovery, enumeration and exploit methods.
• Experience assessing cloud environments (AWS, Azure, GCP), including misconfigurations, attack paths and defensive controls.
• Nice to have: EDR solutions, vulnerability management, Windows/Linux/macOS, networking, application security, Python/PowerShell/Bash/C++, Metasploit, Kali Linux, Burp Suite, purple team experience.

What we offer

• Annual salary range of $123,000 to $190,000, negotiable, with eligibility for a discretionary annual bonus.
• Group health, vision and dental insurance, FSA and HSA accounts, life and accident insurance, adoption and fertility assistance, paid parental leave of up to 6 weeks and paid time off.
• 401(k) savings plan with a 100% employer match on the first 3% of contributions for eligible employees.