{"id":3916009,"url":"https://alion.io/job/ex-squared-cybersecurity-penetration-manager","title":"Cybersecurity Penetration Manager","company":{"id":4468346,"name":"EX Squared","domain":"exsquared.com","url":"https://alion.io/company/exsquared-com","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"BambooHR","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"MITRE ATT&CK","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false}],"status":"live","first_seen_at":"2026-09-23T00:00:00Z","employer_posted_date":"2026-09-23","last_verified_at":"2026-11-08T00:36:33Z","board_verified":true,"closed_at":null,"days_open":46,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":46},"description":"At EX Squared LATAM, we partner with leading organizations across global and regional markets to connect exceptional professionals with high-impact career opportunities.\nOur client is a leading global organization in the professional services and consulting industry, supporting businesses with complex technology, cybersecurity, risk, compliance, and transformation initiatives.\nFor this position, EX Squared LATAM is supporting our client with the recruitment and selection process. The selected professional will be hired directly by the client under their local payroll in Mexico, becoming part of their internal team.\nRole Overview\nWe are currently seeking a Cybersecurity Penetration Managerto lead advanced, hands-on penetration testing and security assessment engagements across complex application, network, infrastructure, API, and cloud environments.\nThis is an individual contributor position with no direct reports or people-management responsibilities. The role requires strong technical depth, independent execution, effective stakeholder communication, and the ability to identify, validate, exploit, document, and clearly communicate security vulnerabilities and their potential business impact.\nCompany Title\nManager, Cyber Assessment - Penetration Testing.\nLocation\nFor professionals based in Mexico City or Guadalajara, the position follows a hybrid model with onsite attendance approximately 2-3 days per week.\nCandidates based in other cities in Mexico may be considered for a remote arrangement; however, Mexico City and Guadalajara profiles will receive priority.\nContract Duration\nPermanent, direct employment with the client.\nWorking Hours\nMonday through Friday, either 7:00 a.m.-4:00 p.m.or 8:00 a.m.-5:00 p.m. Eastern Time.\nLanguage Requirement\nAdvanced English.\nWhat you'll do\nConduct detailed application, API, network, infrastructure, and cloud penetration testing engagementsto identify exploitable vulnerabilities, security control gaps, and remediation opportunities.\nPlan and execute penetration testing across web applications, APIs, internal and external networks, cloud-hosted environments, and supporting infrastructure.\nPerform hands-on vulnerability validation and exploitation beyond automated vulnerability scanning.\nIdentify and assess vulnerabilities such as authentication and authorization weaknesses, injection vulnerabilities, business logic flaws, insecure configurations, and sensitive data exposure.\nDocument findings with clear technical evidence, business impact, risk context, reproducible steps, and practical remediation recommendations.\nSupport remediation efforts through technical discussions, retesting, and collaboration with application, infrastructure, and security teams.\nCommunicate assessment results to both technical and non-technical stakeholders through reports, walkthroughs, and remediation discussions.\nApply established security assessment methodologies and frameworks such as MITRE ATT&CK, OWASP Top 10, OWASP API Security Top 10, and PTES.\nUse scripting and automation to improve security assessment and penetration testing activities.\nStay current with emerging vulnerabilities, exploitation techniques, security tools, and penetration testing methodologies.\nWork independently on technically complex assessments while exercising strong analytical judgment.\nWhat you'll bring\n5+ years of hands-on Penetration Testing experience as a primary/core professional responsibility.\nStrong practical experience performing manual web application penetration testing.\nStrong hands-on experience with API penetration testing.\nExperience conducting network and infrastructure penetration testing, including internal and external environments.\nExperience assessing cloud-hosted environmentsand a solid understanding of cloud security concepts.\nProven ability to identify, validate, and exploit vulnerabilities rather than relying exclusively on automated scanning tools.\nStrong familiarity with MITRE ATT&CK, OWASP Top 10, OWASP API Security Top 10, PTES, or similar methodologies.\nExperience with penetration testing, vulnerability scanning, exploitation, and security assessment tools.\nProficiency in scripting and automation, using technologies such as Python, Bash, or PowerShell.\nStrong understanding of security principles, IT security controls, remediation practices, and common and emerging security threats.\nAbility to clearly document and explain technical vulnerabilities, their practical impact, and recommended remediation.\nExperience working directly with clients, project stakeholders, application teams, or business units.\nStrong verbal and written communication, analytical thinking, problem-solving, and independent judgment skills.\nBachelor’s degree or equivalent relevant professional background.\nWhat will make you stand out\nCertifications such as OSCP, GPEN, GWAPT, OSCE, GXPN, or similar.\nCISSPor cloud security/platform certifications.\nParticularly strong experience performing penetration testing across several domains, including applications, APIs, networks, infrastructure, and cloud.\nStrong scripting or automation capabilities that improve the efficiency or repeatability of penetration testing activities.\nExperience working directly with U.S.-based or multicultural teams.\nAbility to translate highly technical vulnerabilities into clear business risk and actionable remediation recommendations.\nA strong commitment to continuously learning new offensive security techniques, technologies, and assessment methodologies.\nWhy this opportunity?\nThis is an opportunity to join a large, globally recognized organization in the professional services and consulting industryand work on technically challenging security assessments within an international environment.\nThe position is particularly suited for an experienced penetration tester who wants to remain deeply hands-on technicallywhile operating at a senior Manager level, without moving into a traditional people-management role.\nYou’ll have exposure to complex enterprise environments, U.S.-based stakeholders, modern application and cloud technologies, and a wide variety of penetration testing scenarios.\nWhat the Client Offers\nCareer growth opportunities.\nMeal/grocery vouchers.\nSavings fund.\nFinancial support for courses and professional certifications.\nRemote-work allowance, when applicable.\nEligibility Note\nThis opportunity is available to candidates currently residing in Mexico.\nCandidates located in Mexico City and Guadalajara are strongly preferreddue to the hybrid working model. Candidates located elsewhere in Mexico may also be considered for remote work depending on profile and business requirements.\nReady for your next career opportunity?\nApply through EX Squared LATAMand take the next step toward joining a global organization where advanced cybersecurity expertise, hands-on Penetration Testing, and real-world risk reduction come together.","description_format":"text","description_chars":6916,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Growth opportunities","Hybrid work"],"hiring_locations":[{"name":"Mexico","iso":"MX","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Application Security","Digital Goods"],"lifecycle":[{"event":"open","at":"2026-11-07T12:18:09Z"}],"visa":[],"liveness":{"score":22,"band":"cold","label":"Long shot","p_open":1,"p_active":0.488,"p_room":0.45,"age_days":46,"expected_fill_days":25,"reasons":["conf:1","win:tail"],"computed_at":"2026-11-08T01:56:59Z"},"pay":null,"html_url":"https://alion.io/job/ex-squared-cybersecurity-penetration-manager","json_url":"https://alion.io/job/ex-squared-cybersecurity-penetration-manager.json","meta":{"generated_at":"2026-11-08T01:56:59Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4263,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4468346},"rest":"https://alion.io/mcp/rest/get_company?id=4468346"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fex-squared-cybersecurity-penetration-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fex-squared-cybersecurity-penetration-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fex-squared-cybersecurity-penetration-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ex-squared-cybersecurity-penetration-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fex-squared-cybersecurity-penetration-manager"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3916009}},{"tool":"search_jobs","arguments":{"company":"exsquared.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3916009},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}