Apply on Employer Site

Guardian Life · 2 weeks ago

Head of Cybersecurity Assurance Testing

New York

Full-time

Hybrid

Lead/Staff, Director/Executive

$119K/yr - $195K/yr

5+ years exp

Guardian Life is a leading insurance company seeking a Head of Cybersecurity Assurance Testing. This role involves managing application security testing, ethical hacking programs, and third-party testing exercises while leading a team and ensuring effective collaboration across departments.

DentalFinancial ServicesHardwareInsuranceLife Insurance

No H1B

Responsibilities

Develop and own the roadmap, backlog, and quarterly planning for Application Security, Red, and Purple Teaming

Lead red team missions, application security tests, and coordinate third-party adversarial exercises

Ensure team performance, resource planning, and program outcomes; deliver results directly and through others

Oversee project delivery and capability expansion

Plan, execute, and report on Purple Team (offense/defense) exercises

Partner with Cyber Defense to improve detection, response, and resilience

Deliver actionable readouts and lessons learned to all stakeholders

Align with Vulnerability and Threat specialists, stakeholders, and Peer teams for future red team planning

Manage, coach, and develop engineers; set goals, provide feedback, support growth, and aide with career development planning. Include diverse learning in plans from conferences to hands-on learning and capture-the flag exercises, to additional learning activities and certifications

Foster a high-performance, accountable, and innovative culture

Ensure optimal resource utilization and allocation

Partner with application owners, global teams, and security stakeholders to focus on high-risk areas and close findings

Translate findings to meaningful insights and recommend defense improvements

Influence offensive/application security testing standards and other policies and standards based on findings

Introduce new offensive/Application Security technologies, methodologies, and automation (including A.I.)

Integrate security validation into CI/CD; promote automated testing

Encourage continuous improvement and experimentation

Define, track, and report KPIs for coverage, risk reduction, remediation, and automation

Deliver executive-ready reports translating technical findings to business risk

Publish KPIs and ensure timely remediation or risk acceptance of findings

Qualification

Offensive securityPenetration testingApplication security testingRed team operationsPurple team exercisesSecure SDLCAutomation frameworksStakeholder managementRisk managementContinuous improvementCommunication skillsTeam leadershipCollaboration