Who you'll be:

Lead and manage a large-scale enterprise vulnerability management and offensive security program, overseeing a continuous scanning and remediation-validation cycle across thousands of endpoints. This role involves planning and executing penetration testing engagements, leading red and purple team exercises, and collaborating with security operations to enhance threat-hunting and remediation workflows. Provide technical leadership and mentorship to a team of analysts and testers.

What you'll do:

• Own and operate the enterprise vulnerability scanning, prioritization, and remediation-validation program.
• Track known exploited vulnerabilities against applicable federal directives and drive remediation timelines.
• Plan and execute penetration testing engagements under formal Rules of Engagement, including scoping and reporting.
• Lead red and purple team exercises to validate detection and response effectiveness.
• Validate and retest completed remediation actions to confirm vulnerabilities are fully resolved.
• Develop and maintain vulnerability management policies, procedures, and reporting metrics.
• Provide technical leadership and mentorship to a team of vulnerability analysts and penetration testers.
• Brief leadership on vulnerability trends, risk exposure, and offensive-security findings.
• Coordinate with the SOC and threat intelligence functions to translate offensive findings into defensive measures.

What you'll need:

• 7 years of penetration testing and/or vulnerability management experience.
• Bachelor's degree in Computer Science, Cybersecurity, or a related field (equivalent experience considered).
• Deep technical knowledge of exploitation techniques, vulnerability scanning tools, and remediation validation methods.
• Experience leading or mentoring a technical team.
• Certifications: OSCP, OSCE, or GIAC Exploit Researcher and Advanced Penetration Tester (GXPN) required.
• CISSP or GPEN preferred.