VP, Penetration Testing & Validation Lead

State Street; Quincy (MA); On-site; USD 120,000 - 203,000; Full time

Benefits offered by this job

401K with company match

Comprehensive health insurance

Paid time off including vacation and s

Employee Assistance Program

Performance-based incentive awards

Tax advantaged savings plans

Job summary

State Street seeks a Vice President, Penetration Testing Analyst, to lead advanced penetration testing engagements and validate remediation across complex environments. You will serve as the in-house technical authority, guiding scoping, test planning, and evidence-based closure decisions for senior leadership.

You will collaborate with finding owners, third-party testers, and security partners to ensure realistic testing, actionable findings, and durable fixes.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or related field, or equivalent practical experience.
• 10+ years of related experience.
• Industry-recognized offensive security certifications such as OSCP, OSEP, OSCE3, CRTO, GXPN, or equivalent.
• Experience supporting large-scale remediation validation programs is strongly preferred.

Responsibilities

• Serve as the senior technical lead across the engagement lifecycle, including scoping, test planning, rules of engagement, execution oversight, and post-test remediation planning.
• Provide real-time technical guidance during engagements by assessing tester activity and guiding escalation decisions.
• Hold external testing providers to a high technical standard by challenging attack paths, evidence quality, severity ratings, and MITRE ATT&CK mapping.
• Lead coordination with finding owners and engineering teams to define remediation criteria and validation.
• Lead strategy for validating remediation, including grouping findings and retesting fixes.
• Assess remediation across the wider estate and new exposure the fix introduces.
• Make the final technical call on closure recommendations with executive summaries.
• Present outcomes to senior leadership and governance forums, defending technical basis for findings.
• Design and lead targeted TTP assessments and purple team exercises.
• Feed detection gaps to Detection Engineering and Security Operations with measurable improvements.
• Provide offensive security support to partner teams and mentor others.

Skills

Offensive security experience

Penetration testing leadership

MITRE ATT&CK knowledge

Executive communication

Education

Bachelor's degree in Computer Science, Cybersecurity, or related field

10+ years of related experience

OSCP / OSEP / OSCE3 / CRTO / GXPN or equivalent

Tools

Cobalt Strike

BloodHound

Mimikatz

Metasploit

Kali Linux

PowerShell

Job description

State Street seeks a Vice President, Penetration Testing Analyst, to lead advanced penetration testing engagements and validate remediation across complex environments. You will serve as the in-house technical authority, guiding scoping, test planning, and evidence-based closure decisions for senior leadership.

You will collaborate with finding owners, third-party testers, and security partners to ensure realistic testing, actionable findings, and durable fixes.