Leads and participates in comprehensive penetration testing efforts across all layers of services including applications, cloud, network, hardware and critical infrastructure operational technology (OT) systems. Identifies security vulnerabilities, performs end-to-end adversary emulation within approved rules of engagement for multiple areas of responsibility with an ability to come up to speed on new targets and unidentified patterns without direction. Operates in uncertain, challenging, and novel environments and execute offensive and defensive security operations. Identifies unknown risk areas and leverages expertise to appropriately handle them. Builds relationships to enable streamlined and efficient communication and collaboration, advocating for security change across the organization. Provides strategic guidance to teams on priorities, tactics, evaluation strategies, and development of methodologies. Chains findings into attack paths that demonstrate operational and business impact. Organizes and directs the team focused on engagement rules, scoping, executive risk communications and technical guidance for operations. Leads the rhythm of business across team to ensure remediation of findings is completed according to the defined SLA; reporting and all communications are delivered on time. Creates high-quality executive level verbal and written presentations advocating for and outlining process of penetration testing, explaining technical information to non-technical audiences, as well as present data driven reporting tracking operations, explaining impact, risks, vulnerabilities, system information and remediation plans with potential impact. Works as a technical operator on various types of penetration testing offerings with an ability to identify and exploit misconfigurations, improve detection capabilities, and enhance threat visibility. Research emerging threats, vulnerabilities, and tools to stay updated with the latest attack techniques, and security trends Mentors and guide team members and partners, fostering a culture of curiosity, collaboration, and technical excellence. Partners closely with detection, threat intelligence and incident response teams to turn findings into actionable detections. Applies AI and automation to scale reconnaissance, discovery and testing. Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 4+ years' experience in security or related field OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 6+ years' experience in security or related field OR equivalent experience. These requirements include, but are not limited to the following specialized security screenings: Citizenship & Citizenship Verification: This position requires verification of citizenship due to citizenship-based legal restrictions. Specifically, this position supports United States federal, state, and/or local government agency customers and is subject to certain citizenship-based restrictions where required or permitted by applicable law. To meet this legal requirement, and as a condition of employment, the successful candidate's citizenship will be verified with a valid passport. 6+ years of experience in identifying security vulnerabilities, software development lifecycle, large-scale computing, modeling, cyber security, and anomaly detection 6+ years of experience with coding or scripting in languages such as C#, Python, C++, Go, PowerShell, .NET, Rust, or other comparable programming languages Familiarity with security standards and frameworks like OWASP, MITRE ATT&CK, and NIST. 3+ years of experience leading a penetration testing team including hiring, mentoring and managing full time and vendor engineers. Relevant offensive security certifications such as OffSec OSCP, OSEP/OSCE³, GPEN, GXPN, or similar; OT/ICS certifications (e.g., GICSP, GRID) Experience utilizing open-source and open-weight Large Language Models (LLMs), and chunking, embeddings and RAG techniques. Expertise developing KQL queries, data models, anomaly detection, correlation analytics, statistical analysis. Deep understanding of Azure; AWS, or GCP experience. Knowledge of operational technology (OT) and Industrial Control Systems (ICS) security. Effective organizational and technical program management skills as well as demonstrated skills for conveying complex concepts to diverse audiences. Proficiency with Power BI and Azure DevOps for reporting and tracking