Penetration Testing Director

Compensation Planning

Bonus Calculator

Develop a Job description

Pay Equity

Penetration Testing Director directs a team that performs penetration testing to assess and identify security vulnerabilities of networks, applications, and systems. Oversees vulnerability assessment and penetration testing activities. Being a Penetration Testing Director reviews and analyzes root cause analysis reports and makes recommendations to eliminate risks. Creates and develops methodologies to analyze and define risk, identify weaknesses, and drive the development of countermeasures and security improvements. Additionally, Penetration Testing Director develops penetration testing policies and procedures by utilizing the latest tools, techniques, training, and industry best practices. Stays up to date with the latest security threats, techniques, and tools to continuously improve penetration testing methodologies. Has extensive experience using a variety of assessment tools (such as Nmap, BurpSuite, Kali Linux), scripting languages (like Bash, Python, Perl, or Ruby), and cybersecurity frameworks and protocols. Typically requires a bachelor's degree in computer science. May require GIAC Penetration Tester (GPEN), GIAC Web Application Penetration Tester (GWAPT), and/or Offensive Security Certified Professional (OSCP) certificate. Typically reports to senior management. The Penetration Testing Director manages a departmental sub-function within a broader departmental function. Creates functional strategies and specific objectives for the sub-function and develops budgets/policies/procedures to support the functional infrastructure. To be a Penetration Testing Director typically requires 5+ years of managerial experience. Deep knowledge of the managed sub-function and solid knowledge of the overall departmental function.