Senior Manager Cybersecurity Operations Offensive Security

Zions Bank • Midvale, UT

76d

About The Position

Zions Bancorporation's Enterprise Technology and Operations (ETO) team is transforming what it means to work for a financial institution. With a commitment to technology and innovation, we have been providing our community, clients and colleagues the best experience possible for over 150 years. Help us transform our workforce of the future, today. We are seeking a Senior Manager Cybersecurity Operations - Offensive Security to join Zions Bancorporation. This position plays a key role in leading offensive security initiatives for the bank, including penetration testing, adversarial emulation, red teaming, threat hunting and cyber threat intelligence to proactively identify risks, validate defenses and enhance the overall security posture. The ideal candidate is a hands-on professional with deep expertise in offensive security techniques as well as a strong understanding of the attack lifecycle, threat modeling and risk analysis.

Requirements

• Bachelor's degree in Information Systems, Computer Science, Business Administration, or a related field and/or 10 years' experience dealing with Information Security.
• Experience must include leadership/management experience.
• Strong knowledge of offensive testing methodologies, including MITRE ATT&CK, CVE, CWE, and the cyber kill chain.
• Demonstrated expertise in red team, purple team, threat hunting, cyber threat intelligence and advanced penetration testing.
• Experience scaling offensive security programs within large enterprise environments.
• Ability to communicate offensive testing results to technical and non-technical audiences, including executive leadership and regulators.
• Experience managing and working with risk partners, federal regulators, internal and external audit, enterprise risk and executives.
• Strong leadership skills, ability to exercise independent judgment and ability to direct advanced security engineers with appropriate delegation.
• Direct experience with building out relevant KRIs/KPIs and implementing Agile methodologies.

Responsibilities

• Oversee a comprehensive offensive security program, including penetration testing, red teaming, threat hunting, detection engineering, cyber threat intelligence, and purple team exercises.
• Maintain a proactive threat identification strategy aligned with MITRE ATT&CK and the cyber kill chain.
• Develop and maintain a third-party penetration testing strategy to provide independent assurance of the bank's security posture.
• Partner with defensive security and vulnerability management teams to ensure findings are prioritized and remediated.
• Develop relevant metrics to measure and communicate offensive security results and trends.
• Present offensive security findings to both technical and non-technical audiences.
• Provide proactive threat intelligence to relevant stakeholders.
• Assist with active security investigations.
• Collaborate with security risk assessment and engineering teams to integrate cyber threat intelligence into supplier risk management assessment and ongoing supplier monitoring, including supplier security posture management and assurance activities.
• Other duties as assigned.

Benefits

• Medical, Dental and Vision Insurance - START DAY ONE!
• Life and Disability Insurance, Paid Parental Leave and Adoption Assistance
• Health Savings (HSA), Flexible Spending (FSA) and dependent care accounts
• Paid Training, Paid Time Off (PTO) and 11 Paid Federal Holidays
• 401(k) plan with company match, Profit Sharing, competitive compensation in line with work experience
• Mental health benefits including coaching and therapy sessions
• Tuition Reimbursement for qualifying employees
• Employee Ambassador preferred banking products

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Industry: Credit Intermediation and Related Activities
• Education Level: Bachelor's degree