VP, Penetration Testing & Security Assurance

State Street Corporation; Quincy (MA); On-site; USD 120,000 - 203,000; Full time

Benefits offered by this job

401K matching retirement plan

Comprehensive benefits program

Paid time off and PTO

Job summary

State Street Corporation seeks a Vice President, Penetration Testing Analyst to join the Threat Intelligence and Assurance organization. This senior, hands-on role serves as the in-house technical authority for complex engagements and remediation validation.

You will drive scenario-based testing against high-value systems, validate fixes, mentor teams, and present results to senior leadership with clear, defensible conclusions.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or related field.
• 10+ years of related experience.
• Industry-recognized offensive security certifications such as OSCP, OSEP, OSCE3, CRTO, GXPN, or equivalent.
• Experience supporting large-scale remediation validation programs is strongly preferred.

Responsibilities

• Lead senior technical engagements across the engagement lifecycle from scoping to remediation planning.
• Provide real-time technical guidance during engagements and assess operational risk.
• Hold external providers to high technical standards and ensure actionable results.
• Turn findings into clear remediation requirements and validation criteria.
• Retest fixes against the original attack path and other paths to verify coverage.
• Present testing outcomes to senior leadership and governance forums.
• Mentor team members and partner staff to mature internal capability.

Skills

Offensive security

Active Directory

MITRE ATT&CK

C2 frameworks

Executive communication

Education

Bachelor's degree in CS/Cybersecurity

Equivalent practical experience

Tools

Cobalt Strike

Mimikatz

BloodHound

Metasploit

Kali Linux

Job description

State Street Corporation seeks a Vice President, Penetration Testing Analyst to join the Threat Intelligence and Assurance organization. This senior, hands-on role serves as the in-house technical authority for complex engagements and remediation validation.

You will drive scenario-based testing against high-value systems, validate fixes, mentor teams, and present results to senior leadership with clear, defensible conclusions.