[Hiring] Penetration Testing Manager @First Citizens Bank

Role Description

The AppSec Pentest Manager leads a team of highly qualified penetration testers in First Citizens Bank’s AppSec Testing Program. This leader is a strategic partner with application development teams and IT teams. In this role, the Pentest Manager must be able to demonstrate deep knowledge of penetration testing processes such as the OWASP Top 10, Penetration Testing Execution Standard (PETS), and CREST Pentesting Methodologies. This role will lead the penetration testing team in identifying, classifying, and reporting complex vulnerabilities against First Citizens Bank’s custom applications. Remote eligible.

Qualifications

• Bachelor's Degree and 8 years' experience OR High School Diploma or GED/Equivalent and 12 years' experience in Information security or technology
• At least one industry standard certification related to penetration testing and/or cybersecurity leadership (CISSP, CISM, GPEN, GWAPT, OSCP, OSWA)
• Experience with agentic pentesting

Requirements

• Expert level of skill in strategy development that integrates into the overall AppSec and Vulnerability Management Strategy, SDLC, and First Citizens Bank’s Risk Appetite.
• Ability to establish a penetration testing schedule and cadence with multiple inputs and coordination between multiple teams.
• Expert ability to identify schedule slippages early and remediate them to ensure applications follow First Citizens Bank standards.
• Establishes and monitors expectations to achieve company and department goals.
• Manages the performance, training, and evaluation of assigned staff.
• Creates development plans for assigned staff to ensure their skillsets remain at the highest level.
• Responsible for vendor management and procurement of tools and services.
• Provide expert technical advice to internal team members on penetration testing methodology.
• Provide expert technical advice to internal clients on the overall impact of penetration testing findings and recommendations for remediation.
• Partner with Application teams to drive the closure of penetration testing findings.
• Partner with application teams, BISOs, GRC, and IT Teams to ensure exceptions are properly documented and in line with First Citizens Bank’s risk appetite.
• Regularly report metrics and analyze data from various sources to answer important business questions and identify trends or issues from the data.
• Ability to communicate risk to a variety of audiences, deftly changing style and level of detail accordingly.
• Expert ability to discuss significance of data to C-Level executives and above.
• Communication to direct supervisor, clearly and concisely articulating risks and issues.

Benefits

• This job posting is expected to remain active for 30 days from the initial posting date.
• The base pay for this position is generally between $155,000 and $190,000.
• Actual starting base pay will be determined based on skills, experience, location, and other non-discriminatory factors permitted by law.
• For some roles, total compensation may also include variable incentives, bonuses, benefits, and/or other awards as outlined in the offer of employment.
• More information can be found at First Citizens Bank Benefits .