{"id":3939099,"url":"https://alion.io/job/firstcitizens-penetration-testing-manager-sr-manager-infosec-remote","title":"Penetration Testing Manager (Sr. Manager InfoSec) - Remote","company":{"id":721285,"name":"Firstcitizens","domain":"firstcitizens.com","url":"https://alion.io/company/firstcitizens","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"inferred_company_offices","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":155000,"max":190000,"currency":"USD","period":"year","gross":null,"usd_annual":190000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"OWASP Top 10","optional":false}],"status":"live","first_seen_at":"2026-11-08T07:20:11Z","employer_posted_date":null,"last_verified_at":"2026-11-08T07:20:11Z","board_verified":false,"closed_at":null,"days_open":1,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":1},"description":"Overview\n\nThe AppSec Pentest Manager leads a team of highly qualified penetration testers in First Citizens Bank’s AppSec Testing Program. This leader is a strategic partner with application development teams and IT teams. In this role the Pentest Manager must be able to demonstrate deep knowledge of penetration testing processes such as the OWASP Top 10, Penetration Testing Execution Standard (PETS), and CREST Pentesting Methodologies. This role will lead the penetration testing team in identifying, classifying, and reporting complex vulnerabilities against First Citizens Bank’s custom applications.\nRemote eligible. \nResponsibilities & Qualifications\n\nDuties & Responsibilities:\n\nPenetration Testing Strategy – Expert level of skill in strategy development that integrates into the overall AppSec and Vulnerability Management Strategy, SDLC, and First Citizens Bank’s Risk Appetite. This role should be able to expertly establish a regular penetration testing cadence that aligns with First Citizens Bank’s Cyber Security Standards. This role will also identify areas of improvement for the penetration testing team and drive the improvement projects to completion.\n\nProgram Management – Ability to establish a penetration testing schedule and cadence with multiple inputs and coordination between multiple teams. Expert ability to identify schedule slippages early and remediate them to ensure applications follow First Citizens Bank standards. Ability to rapidly switch gears if an urgent need arises.\n\nManagerial Functions - Establishes and monitors expectations to achieve company and department goals. Manages the performance, training, and evaluation of assigned staff. Creates development plans for assigned staff to ensure their skillsets remain at the highest level. Responsible for vendor management and procurement of tools and services.\n\nPenetration Testing Subject Matter Expert – Provide expert technical advice to internal team members on penetration testing methodology. Provide expert technical advice to internal clients on the overall impact of penetration testing findings and recommendations for remediation. Partner with Application teams to drive the closure of penetration testing findings. Partner with application teams, BISOs, GRC, and IT Teams to ensure exceptions are properly documented and in line with First Citizens Bank’s risk appetite.\n\nReporting – Regularly report metrics. Expert ability to analyze data from various sources to answer important business questions and identify trends or issues from the data.\n\nCommunication – Ability to communicate risk to a variety of audiences, deftly changing style and level of detail accordingly. Expert ability to discuss significance of data to C-Level executives and above. Communication to direct supervisor, clearly and concisely articulating risks and issues. \n\nMinimum Required Education and Experience: Bachelor's Degree and 8 years' experience OR High School Diploma or GED/Equivalent and 12 years' experience in Information security or technology\nPreferred Area of Experience:\nAt least one on industry standard certification related to penetration testing and/or cybersecurity leadership (CISSP, CISM, GPEN, GWAPT, OSCP, OSWA)\n\nExperience with agentic pentesting\n\nAdditional Information\n\nThis job posting is expected to remain active for 30 days from the initial posting date listed above. If it is necessary to extend this deadline, the posting will remain active as appropriate. Job postings may come down early due to business need or a high volume of applicants. \nThe base pay for this position is generally between $155,000 and $190,000. Actual starting base pay will be determined based on skills, experience, location, and other non-discriminatory factors permitted by law. For some roles, total compensation may also include variable incentives, bonuses, benefits, and/or other awards as outlined in the offer of employment.\nBenefits are an integral part of total rewards and First Citizens Bank is committed to providing a competitive, thoughtfully designed and quality benefits program to meet the needs of our associates. More information can be found at .\nOriginally posted on Himalayas","description_format":"text","description_chars":4193,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Information Security","Application Security","Vulnerability Management"],"lifecycle":[{"event":"open","at":"2026-11-08T11:28:30Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":35,"reasons":["seen:0","win:early"],"computed_at":"2026-11-09T06:03:00Z"},"pay":{"stated_usd_annual":190000,"is_top_pay":true},"html_url":"https://alion.io/job/firstcitizens-penetration-testing-manager-sr-manager-infosec-remote","json_url":"https://alion.io/job/firstcitizens-penetration-testing-manager-sr-manager-infosec-remote.json","meta":{"generated_at":"2026-11-10T05:00:01Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11703,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":721285},"rest":"https://alion.io/mcp/rest/get_company?id=721285"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffirstcitizens-penetration-testing-manager-sr-manager-infosec-remote"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffirstcitizens-penetration-testing-manager-sr-manager-infosec-remote"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffirstcitizens-penetration-testing-manager-sr-manager-infosec-remote"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/firstcitizens-penetration-testing-manager-sr-manager-infosec-remote\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffirstcitizens-penetration-testing-manager-sr-manager-infosec-remote"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3939099}},{"tool":"search_jobs","arguments":{"company":"firstcitizens.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3939099},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}