Senior Cybersecurity & Penetration Testing Leader

Periferia IT Group; United States; On-site; USD 150,000 - 210,000; Full time

Job summary

Periferia IT Group seeks a Cybersecurity & Pentesting Lead to strengthen the security posture of the organization and its clients through risk management and controls implementation.

You will lead offensive security efforts, coordinate purple team exercises, and drive audits and certifications while adopting leading frameworks like NIST, CIS, ISO 27001/27002, MITRE ATTACK, and MITRE ATLAS.

Qualifications

• Professional degree in Systems Engineering, Telecommunications, Cybersecurity, or related fields.
• 5+ years of experience in offensive security, risk management, or security architecture.
• Experience leading assessments for clients and presenting results to senior management.
• Desirable: Experience in regulated sectors and hybrid or multi-cloud environments.

Responsibilities

• Cybersecurity Strategy: Design and execute the corporate and client cybersecurity strategy. Assess risks, control gaps, technology exposure, and security maturity.
• Pentesting & Technical Assessments: Plan and perform pentesting for web, API, mobile, infrastructure, cloud, wireless networks, and internal environments. Define rules of engagement, scope, authorizations, risk criteria, and evidence handling.
• Reporting & Communication: Prepare executive and technical reports with reproducible findings, impact, evidence, and prioritized recommendations. Present results to senior management and clients.
• Purple Team & Threat Hunting: Coordinate purple team, threat hunting, and control validation exercises using MITRE ATT&CK. Assess AI/ML risks using MITRE ATLAS.
• Vulnerability & Control Management: Implement and measure controls based on CIS Controls, NIST CSF, NIST SP 800-53, ISO 27001/27002, and OWASP practices. Manage vulnerabilities, treatment plans, exceptions, and remediation tracking.
• Monitoring & Response: Define monitoring, incident response, continuity, and recovery capabilities.
• Audits & Certifications: Support audits, certifications, commercial processes, and client meetings.
• Documentation & Methodologies: Keep methodologies, templates, playbooks, evidence, and knowledge base up to date.
• Security Culture: Promote security culture through technical and executive training.

Skills

Leadership

Analytical thinking

Effective communication

Risk management

Proactivity

Mediation

Results-oriented

Regulatory knowledge

Education

Professional degree in Systems Engineering, Telecommunications, Cybersecurity, or related fields.

Tools

NIST

ISO 27001

MITRE ATT&CK

MITRE ATLAS

OWASP

Job description

Periferia IT Group seeks a Cybersecurity & Pentesting Lead to strengthen the security posture of the organization and its clients through risk management and controls implementation.

You will lead offensive security efforts, coordinate purple team exercises, and drive audits and certifications while adopting leading frameworks like NIST, CIS, ISO 27001/27002, MITRE ATTACK, and MITRE ATLAS.