🕒 15 days ago
Lead application security across the development pipeline, product, and customer execution environments by shaping security architecture, partnering with engineering teams, and building guarded AI-assisted workflows.
Penetration Testing Team Lead (R-00251)
🕒 4 days ago
Penetration TestingRed Team OperationsOffensive CybersecurityNetwork Penetration Testing
📜 Description
- Plan and lead penetration testing and Red Team engagements across enterprise systems, networks, applications, cloud infrastructure, and APIs.
- Oversee assessment phases from scoping and reconnaissance through exploitation, post-exploitation analysis, and reporting.
- Manage penetration testing tools, frameworks, infrastructure, and testing environments, including upgrades and evaluation of emerging technologies.
- Align testing with NIST SP 800-115, MITRE ATT&CK, DHS RVA standards, and applicable federal cybersecurity policies.
- Prepare technical findings, risk assessments, executive summaries, and remediation recommendations; collaborate with teams to validate and prioritize fixes.
- Mentor junior testers, provide technical direction and quality assurance, and design adversary simulations to assess defensive capabilities.
🛠️ Requirements
- 12 years of progressive experience in offensive cybersecurity, penetration testing, vulnerability exploitation, Red Team operations, or related technical security disciplines, including leading complex engagements.
- At least one certification: OSCP, OSCE, GXPN, or CEH.
- Hands-on experience with network, web application, API, and AWS cloud penetration testing in complex enterprise environments.
- Strong understanding of NIST SP 800-115, MITRE ATT&CK, DHS RVA methodologies, and security assessment processes.
- Ability to lead technical teams, manage multiple engagements, mentor junior personnel, and communicate findings and remediation strategies to technical and executive stakeholders.
Full job description
True Zero Technologies, a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that those outcomes begin and end with our people, and that is what we have built a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top-tier services to our customers. Our culture and commitment have been recognized through numerous accolades, including being named one of the Best Places to Work in 2023 in two categories (“Prosperous and Thriving” ($5MM–$50MM in gross revenue) and “Mid-Atlantic Region” (DC, DE, MD, NC, VA, WV)), and again in 2025 as a Best Places to Work honoree. In addition, True Zero earned coveted spots on the Inc. 5000 list of fastest-growing companies in America in 2022, 2023, and 2025, a testament to our sustained growth driven by our people-first approach and unwavering dedication to excellence.
Position Overview
True Zero Technologies is seeking an experienced Penetration Testing Team Lead to oversee and execute advanced penetration testing and Red Team operations across federal systems and environments. This role is responsible for leading offensive security assessments, identifying exploitable vulnerabilities, evaluating security controls, and providing actionable recommendations to strengthen the organization's cybersecurity posture.
The ideal candidate will possess extensive hands-on offensive security experience, strong technical leadership skills, and a deep understanding of penetration testing methodologies, adversary simulation, and federal cybersecurity standards.
Job Responsibilities
Key Responsibilities
Job Requirements
Required Qualifications
Similar jobs
Search more Cybersecurity Engineer jobs
🔥 13 hours ago
Own the technical direction of Float’s security platform across application, identity, and infrastructure security, building production controls and tools and driving their adoption across product teams.
🕒 yesterday
Define application security strategy and architecture, review code and designs, and guide engineering teams in protecting software and AI-enabled systems from vulnerabilities and emerging threats.
🕒 3 days ago
Embed security across product, business, data, and technology teams by assessing architectures, shaping practical security designs, and enabling secure SaaS, API, data, and AI capabilities.
Staff Security Engineer | Security Engineering
🕒 7 days ago
ServiceNow👥 10,000+ employees🏢 Computer Software
🕒 7 days ago
Serve as the senior technical authority for security engineering in a Canadian regulated environment, building and operating controls, automation, and reporting across identity, cloud, infrastructure, and security operations.