Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Penetration Testing Analyst, Vice President role.

Rezi rewrites your resume against State Street's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Penetration Testing Analyst, Vice President posting at State Street — free, in seconds.

About the Role

We are seeking a Vice President, Penetration Testing Analyst, to join State Street's Threat Intelligence and Assurance organization. This is a senior, hands-on technical role serving as the team's in-house technical authority for complex penetration testing engagements and for validating remediation.

Responsibilities

Serve as the senior technical lead across the engagement lifecycle, including scoping, test planning, rules of engagement, execution oversight, and post-test remediation planning.
Provide real-time technical guidance during engagements by assessing tester activity, judging operational risk, and guiding escalation decisions.
Hold external testing providers to a high technical standard by challenging their attack paths, evidence quality, severity ratings, and MITRE ATT&CK mapping.
Lead coordination with finding owners and engineering teams to turn findings into clear technical remediation requirements and measurable validation criteria.
Lead the strategy for validating remediation, including grouping related findings, defining test criteria and expected outcomes, and personally retesting fixes.
Assess remediation across the wider estate, including variant attack paths, implementation consistency, and any new exposure the fix introduces.
Make the final technical call on closure recommendations, backed by evidence-based reporting.
Present testing and validation outcomes to senior leadership and governance forums, and defend the technical basis for findings, residual risk, and closure decisions.
Design and lead targeted TTP assessments and collaborative purple team exercises.
Feed detection and control gaps found during testing to Detection Engineering, Assurance, and Security Operations, and track resulting improvements.
Provide offensive security support to partner teams, including risk and regulatory functions, and help set the methods, test plans, evidence standards, and lessons-learned practices.
Mentor team members and partners.

Requirements

Extensive hands-on experience in offensive security, such as advanced penetration testing, red teaming, or adversary simulation, ideally in financial services or another highly regulated industry.
Expert-level practical knowledge of Active Directory and Entra ID attack paths, privilege escalation, lateral movement, credential abuse, EDR evasion, and cloud attack techniques across Azure and AWS.
Advanced proficiency with offensive tooling and C2 frameworks, such as Cobalt Strike, BloodHound, Mimikatz, Metasploit, and Kali Linux, plus scripting for custom tooling and automation (Python, PowerShell, or similar).
A proven record of leading remediation validation for complex findings, including defining closure criteria and deciding whether controls work in practice.
Deep working knowledge of MITRE ATT&CK, scenario-based test design, and how detection and response capabilities are measured during testing.
Experience directing and challenging third-party testing providers, with the judgment to separate exploitable risk from theoretical findings.
Executive-level written and verbal communication, with the ability to defend technical conclusions to senior leadership, governance bodies, and independent reviewers.
Discretion and sound judgment when handling sensitive, confidential engagement information.
Experience supporting large-scale remediation validation programs is strongly preferred.

Skills

Offensive security
Advanced penetration testing
Red teaming
Adversary simulation
Active Directory attack paths
Entra ID attack paths
Privilege escalation
Lateral movement
Credential abuse
EDR evasion
Azure cloud attack techniques
AWS cloud attack techniques
Cobalt Strike
BloodHound
Mimikatz
Metasploit
Kali Linux
Python scripting
PowerShell scripting
MITRE ATT&CK
Scenario-based test design
Detection and response measurement
Written communication
Verbal communication

Location

State Street

Work Type

Full-time

Experience Level

10 or more years of related experience
Vice President

Education Level

Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience.
OSCP
OSEP
OSCE3
CRTO
GXPN

Salary/Compensations

$120,000 - $202,500 Annual

Benefits

Retirement savings plan (401K) with company match
Insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages
Paid-time off including vacation, sick leave, short term disability, and family care responsibilities
Access to Employee Assistance Program
Incentive compensation including eligibility for annual performance-based awards
Eligibility for certain tax advantaged savings plans

About the Company

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability.
We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.
We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential.
As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most.
Join us in shaping the future.

Equal Opportunity

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.