Lead Penetration Testing Engineer

Chartwell Investment Partners

Remote
Hybrid (expected to be in the office 10-12 days a month)
Web and mobile application penetration testing
Internal and external network penetration testing
Api testing and automation
Chartwell Investment Partners is seeking a Lead Penetration Testing Engineer to enhance their cybersecurity defenses against sophisticated threats. The role involves leading penetration testing engagements across various environments and collaborating with internal and external teams to improve security posture

Job Summary

  • Lead and execute penetration testing engagements across web and mobile applications, internal and external networks, and other in-scope environments, taking ownership from planning through execution, technical debriefs with stakeholders and verifying remediation success.
  • Coordinate penetration tests, including red team and purple team exercises, working side by side with elite third-party testing partners as well as internal threat hunting, detection engineering, infrastructure, and security teams to turn findings into measurable security improvements.
  • This is a hands-on role for an offensive security professional who thrives in complex environments, enjoys breaking assumptions, and wants their work to directly shape enterprise wide defense strategy.

Matching Summary

Match Score: 85

Chartwell Investment Partners is seeking a Lead Penetration Testing Engineer to enhance their cybersecurity defenses against sophisticated threats. The role involves leading penetration testing engagements across various environments and collaborating with internal and external teams to improve security posture.

Skills & Requirements

Must-have

  • web and mobile application penetration testing
  • internal and external network penetration testing
  • API testing and automation
  • scripting with PowerShell, Python, or Bash
  • report writing and risk translation

Nice-to-have

  • collaboration with detection and response teams
  • mentoring junior team members
  • working with third-party testers

Key Requirements

  • 7+ years of offensive security experience
  • OSCP, OSWE, OSEP, OSWP, or OSEE certifications
  • GIAC: GPEN, GWAPT, GXPN, or GWEB certifications
  • eCPPT or PNPT certifications

Work Rights

Not specified

Tailored Resume

Cover Letter