VP of Penetration Testing & Threat Validation

State Street; Stamford (CT); On-site; USD 120,000 - 203,000; Full time

Job summary

State Street seeks a VP Penetration Testing Analyst to lead technical engagements, validate remediation, and defend findings before senior leadership. This senior, hands-on role requires deep expertise in offensive security, AD/Entra ID paths, and MITRE ATT&CK mappings.

You will mentor peers and coordinate with external providers to ensure actionable, defensible results. You will own testing strategies, drive remediation criteria, and validate fixes across the estate, contributing to a mature

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or related field or equivalent practical experience.

Responsibilities

• Serve as the senior technical lead across the engagement lifecycle, including scoping, test planning, rules of engagement, execution oversight, and post-test remediation planning.
• Provide real-time technical guidance during engagements by assessing tester activity, judging operational risk, and guiding escalation decisions with appropriate discretion.
• Hold external testing providers to a high technical standard by challenging attack paths, evidence quality, severity ratings, and MITRE ATT&CK mapping, ensuring results are accurate and defensible.
• Lead coordination with finding owners and engineering teams to translate findings into clear remediation requirements and measurable validation criteria.
• Lead the strategy for validating remediation, including grouping findings and personally retesting fixes against attack paths.
• Assess remediation across the wider estate, including variant attack paths and implementation consistency.
• Make the final technical call on closure recommendations with evidence-based reporting for senior audiences.
• Present testing and validation outcomes to senior leadership and governance forums, defending the technical basis for findings and residual risk.
• Design and lead targeted TTP assessments and purple team exercises to validate detection, response, and preventive controls.
• Feed detection and control gaps to Detection Engineering, Assurance, and Security Operations and track improvements through validation.
• Provide offensive security support to partner teams, including risk/regulatory functions, and mentor team members.

Skills

Offensive security

Executive communication

MITRE ATT&CK

Test design

Remediation validation

Third-party testing oversight

Mentoring

Education

Bachelor’s degree in Computer Science or Cybersecurity

OSCP/OSEP/OSCE3/CRTO/GXPN or equivalent

Tools

Cobalt Strike

BloodHound

Mimikatz

Metasploit

Kali Linux

Python

PowerShell

Job description

State Street seeks a VP Penetration Testing Analyst to lead technical engagements, validate remediation, and defend findings before senior leadership. This senior, hands-on role requires deep expertise in offensive security, AD/Entra ID paths, and MITRE ATT&CK mappings.

You will mentor peers and coordinate with external providers to ensure actionable, defensible results. You will own testing strategies, drive remediation criteria, and validate fixes across the estate, contributing to a mature