Manager – Offensive Cybersecurity, Penetration Testing

🔥 10 minutes ago

🏄 California – Remote

🏄 California – Remote

💵 $123k - $190k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 1%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Robert Half

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1948

🎯 Recruiter

👥 HR Tech

🤝 B2B

Recruitment • HR Tech • B2B

Robert Half is a global professional staffing and recruiting firm that connects employers with contract and full-time talent across functions such as finance & accounting, technology, marketing & creative, legal, and administrative support. The company provides executive search, consulting solutions, and localized recruiting through 300+ locations worldwide, and it leverages proprietary and award‑winning AI tools and labor‑market insights (salary guides, market reports, hiring trends) to match candidates and advise hiring managers. Robert Half serves employers with B2B staffing solutions while also supporting job seekers with placement services and career resources.

📋 Description

• Lead and oversee penetration testing engagements across enterprise applications, systems, networks, cloud platforms, and other in-scope environments • Define testing scope, methodology, and priorities based on business risk, threat intelligence, and organizational objectives • Validate vulnerabilities and attack paths through manual testing, proof-of-concept development, and adversary emulation techniques • Partner with engineering, infrastructure, and application teams to communicate findings, support remediation, and improve overall security posture • Lead, mentor, and develop team members to strengthen offensive security capabilities and technical depth • Establish and mature offensive security processes, methodologies, reporting standards, and quality controls • Develop metrics and reporting to communicate testing coverage, findings trends, remediation progress, and program effectiveness to leadership • Collaborate with cross-functional stakeholders to prioritize testing activities and support secure design and remediation efforts • Develop or adapt proof-of-concept exploits to validate vulnerabilities and assess potential business impact • Create repeatable assessment and reporting processes supporting audit, compliance, and governance requirements

🎯 Requirements

• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience • OSCP, OSEP, CRTP, CEH, CPT, CEPT, GPEN or other experienced industry standard penetration testing certification(s) required • 7+ years of combined IT and security work experience with broad exposure to systems analysis, application development, database design, networking, administration, identity, or other responsibilities preferred • 5+ years’ experience in information security required • 3+ years’ experience performing penetration testing required • Ability to work independently and troubleshoot technical and business process related issues • Subject matter expertise in the entire information security stack • Ability to develop technical testing solutions for internal consumption • Ability to analyze and scope vulnerability disclosures and CVEs • Expertise in OWASP • Experience leading penetration testing programs or engagements in a large enterprise environment • Excellent understanding of threat vectors and containment methods • Knowledge of Active Directory discovery, enumeration and exploit methods • Experience assessing cloud environments (AWS, Azure, GCP), including common misconfigurations, attack paths, and defensive controls • Excellent written and verbal communication skills, with ability to present technical findings to technical and non-technical audiences • Experience with multiple and current Endpoint Detection and Response solutions • Experience with Vulnerability Management concepts and best practices • Knowledge of Windows, Linux, Mac OS, and mobile operating systems • Expertise in networking concepts, protocols and encryption • Expertise in application security practices and tools • Expertise in programming/scripting languages such as Python, PowerShell, Bash, C/C++/C# • Expertise in Metasploit or similar tooling • Expertise in penetration testing security tooling such as Kali Linux • Expertise in Burp Suite or similar tooling • Purple team experience

🏖️ Benefits

• Discretionary annual bonus • Group health insurance benefits (medical, vision, dental) • FSA and HSA healthcare accounts • Life and accident insurance • Adoption and fertility assistance • Paid parental leave of up to 6 weeks • Short/long term disability • Paid time off for vacation, personal needs, and sick time • Up to 17 days of Choice Time Off (CTO) per calendar year for new hires • Up to 11 paid holidays per calendar year • 401(k) savings and investment plan or deferred compensation plan (if eligible) • Employer match of 100% on the first 3% of contributions for eligible employees • Reasonable accommodation assistance for applicants with disabilities