The Senior Penetration Test Coordinator is responsible for planning, coordinating, and overseeing penetration testing activities for the organization. This role ensures that security assessments are conducted effectively, vulnerabilities are identified & documented, and remediation efforts are tracked & communicated to stakeholders.
Duties / Responsibilities including % of Time Required :
- Pentest Scheduling & coordination for 40-50 penetration test per year - 40%
- Review & process pentest request against our requirements - 10%
- Facilitate penetration test scoping to ensure test are scoped properly - 10%
- Assist with Monthly / Quarterly / Yearly Metrics & Reporting - 10%
- Assist with Pentest Governance, remediation tracking & follow up - 10%
- Assist with Pentest Finding Retest & Validation - 10%
- Other duties as assigned - 10%
Qualifications :
Bachelor's in Computer Science or 12 years of technology experience (preferred).6 + years of cybersecurity experience, prior experience related to penetration. testing or coordinating / scoping penetration tests is highly desired.2+ years previous experience in a large enterprise or at a financial institution or providing services / consulting for financial institutions is required.1+ year experience in a large enterprise or at a financial institution or providing services / consulting for financial institutions is required.10+ years of experience in Technology or related field CISSP certification preferred.Required Skills :
Project Management : Ability to plan, schedule, and track multiple testing engagements.Vendor Management : Experience coordinating with third-party testing providers or consultants.Documentation : Skilled in writing clear, actionable communications and maintaining audit-ready records.Risk Communication : Translating technical findings into business risks for non-technical stakeholders.Technical Skills :
Networking : Strong grasp of TCP / IP, firewalls, VPNs, proxies, and network protocols.Web & Application Security : Understanding of OWASP Top 10, secure coding practices, and application-layer attacks.