ZipRecruiter

Log In

1

Penetration Testing Manager Jobs in Chicago, IL (NOW HIRING)

Alliant

Senior Penetration Testing Engineer

Chicago, IL · On-site

$92K - $144K/yr

Perform hands-on penetration testing with a primary focus on web applications and web APIs across ... Present findings and trends to engineering teams, security leadership, and management. * Contribute ...

BDO

Senior IT Penetration Tester

Oak Brook, IL

The Senior Cyber Security Penetration Tester performs offensive security testing for BDO clients ... testing using Burp Suite and related techniques, focusing on authentication, session management ...

BDO USA

Senior IT Penetration Tester

Oak Brook, IL · On-site

The Senior Cyber Security Penetration Tester performs offensive security testing for BDO clients ... testing using Burp Suite and related techniques, focusing on authentication, session management ...

Spgi

Lead Penetration Test Engineer

Chicago, IL · Hybrid

$135K/yr

Lead Penetration TestEngineer Location: Hybrid 2 days per week onsite on one of our following sites ... testing. Vulnerability Management & Remediation Collaborate with engineering and development teams ...

S&P Global

Lead Penetration Test Engineer

Chicago, IL · Hybrid

$135K/yr

Lead Penetration TestEngineer Location: Hybrid 2 days per week onsite on one of our following sites ... testing. Vulnerability Management & Remediation Collaborate with engineering and development teams ...

UL Solutions

Senior Penetration Tester

Northbrook, IL · On-site

Conduct web application penetration testing (covering OWASP Top 10, API security, authentication ... management (IAM), network security, container/Kubernetes security, serverless architectures ...

Ecolab

Senior Offensive Security Engineer

Naperville, IL

$114K - $156K/yr

Support improvements to Ecolab's vulnerability management, secure SDLC, DevSecOps, and product ... Support coordination with third-party penetration testing providers when appropriate, including ...

Ecolab

Senior Offensive Security Engineer

Naperville, IL · On-site

$114K - $156K/yr

Support improvements to Ecolab's vulnerability management, secure SDLC, DevSecOps, and product ... Support coordination with third-party penetration testing providers when appropriate, including ...

next page

Showing results 1-20

All JobsPenetration Testing JobsPenetration Testing Manager JobsPenetration Testing Manager Jobs in Chicago, IL

Penetration Testing Manager information

See Chicago, IL salary details

$58.7K

$137K

$191.6K

How much do penetration testing manager jobs pay per year?

As of Aug 14, 2026, the average yearly pay for penetration testing manager in Chicago, IL is $136,970.00, according to ZipRecruiter salary data. Most workers in this role earn between $114,300.00 and $154,500.00 per year, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as a penetration testing manager, and why are they important?

To thrive as a Penetration Testing Manager, you need deep expertise in cybersecurity, vulnerability assessment, and penetration testing methodologies, typically supported by a relevant degree and certifications like OSCP or CISSP. Familiarity with tools such as Metasploit, Burp Suite, and SIEM systems is essential for effectively managing testing operations. Strong leadership, communication, and project management skills help in guiding teams and translating technical findings for stakeholders. These capabilities are crucial to ensure robust security postures, clear risk communication, and successful management of security testing initiatives.

What does a penetration testing manager do?

A Penetration Testing Manager oversees teams that simulate cyberattacks on an organization's systems, networks, and applications to identify vulnerabilities and assess security risks. They are responsible for planning, coordinating, and ensuring the quality of penetration tests, as well as communicating findings to stakeholders and recommending remediation strategies. Additionally, they often develop testing methodologies, manage team performance, and ensure compliance with industry standards and regulations.

What is a penetration testing manager?

A penetration testing manager oversees security teams that conduct simulated cyberattacks to identify vulnerabilities in computer systems and networks. They coordinate testing activities, review findings, and ensure remediation, often requiring knowledge of security tools, methodologies, and relevant certifications like OSCP or CISSP.

What are some common challenges faced by a penetration testing manager when leading a security assessment team?

Penetration Testing Managers often face the challenge of balancing technical depth with project management responsibilities. Coordinating multiple engagements, ensuring consistent testing methodologies, and managing client expectations can be demanding. Additionally, staying updated with evolving threat landscapes and ensuring the team has the necessary skills and certifications are ongoing concerns. Effective communication with both technical staff and non-technical stakeholders is crucial for translating findings into actionable recommendations.

What is the difference between Penetration Testing Manager vs Penetration Tester?

AspectPenetration Testing ManagerPenetration Tester
CertificationsOSCP, CISSP, PMPOSCP, CEH, GPEN
Work EnvironmentOversees teams, manages projects, strategic planningConducts security assessments, performs testing, technical execution
Employer & Industry UsageSecurity firms, large corporations, government agenciesSecurity teams, consulting firms, internal security departments

The main difference is that a Penetration Testing Manager focuses on managing teams, planning projects, and strategic oversight, while a Penetration Tester is hands-on, performing security assessments and testing systems. Both roles require relevant certifications and are integral to cybersecurity, but they differ in responsibilities and scope.

What are the most commonly searched types of Penetration Testing jobs in Chicago, IL?

The most popular types of Penetration Testing jobs in Chicago, IL are:

What are popular job titles related to Penetration Testing Manager jobs in Chicago, IL?

For Penetration Testing Manager jobs in Chicago, IL, the most frequently searched job titles are:

What job categories do people searching Penetration Testing Manager jobs in Chicago, IL look for?

The top searched job categories for Penetration Testing Manager jobs in Chicago, IL are:

Penetration Testing Manager jobs near you
Infographic showing various Penetration Testing Manager job openings in Chicago, IL as of August 2026, with employment types broken down into 71% Full Time, and 29% Part Time. Highlights an 67% In-person, and 33% Hybrid job distribution, with an average salary of $136,970 per year, or $65.9 per hour.

Senior Penetration Tester - Web & Hardware/IoT

JPMorgan Chase & Co.

Chicago, IL • On-site

$133K - $225K/yr

Full-time

Medical, Retirement

Re-posted 19 days ago

JPMorgan Chase & Co. rating

8.0

Company rating: 8.0 out of 10

Based on 494 frontline employees who took The Breakroom Quiz

71st of 171 rated banks

Job description


This position is also open in the following locations: New York, NY / Atlanta, FL / Plano, TX / Columbus, OH / McLean, VA / Wilmington, DE / Jersey City, NJ / Tampa, FL / Brooklyn, NY / Houston, TX / Washington, DC
Drive the security of critical banking applications, platforms, and connected devices through hands-on offensive testing.
As an Assessments & Exercises Vice President in the Cybersecurity and Technology Controls organization, you will play a key role in safeguarding the firm's most vital assets. Your primary responsibility will be to plan, execute, and report on penetration tests targeting high-impact applications, platforms, services, and - on a more limited basis - banking hardware and IoT endpoints (e.g., ATMs, Point of Sale devices, and other connected devices). Leveraging industry-standard methodologies and advanced techniques, you will proactively identify vulnerabilities, collaborate with application owners to understand root causes, and guide effective remediation to strengthen the firm's security posture.
We are seeking candidates with a passion for offensive security, deep technical expertise in penetration testing, and a commitment to continuous learning and excellence.
Job responsibilities
  • Plan, scope, and execute penetration testing engagements across a variety of environments, including web applications, APIs, cloud platforms, infrastructure, thick-client, and/or mobile applications (primary focus).
  • Perform security assessments of banking hardware and connected/IoT technologies (limited but expected), such as ATMs, Point of Sale (POS) devices, and other embedded endpoints.
  • Collect and validate pre-requisites for each engagement, ensuring all necessary access, documentation, and approvals are in place (including lab/onsite testing logistics and device access where applicable).
  • Perform manual and automated testing to identify vulnerabilities, misconfigurations, and security weaknesses, leveraging industry-standard tools and custom scripts.
  • Document and communicate findings through comprehensive reports that include technical details, risk assessments, and actionable remediation recommendations.
  • Conduct peer reviews of penetration test reports to ensure accuracy, consistency, and quality of deliverables.
  • Collaborate with development, infrastructure, security, and device/product engineering teams to clarify findings, support remediation efforts, and provide subject matter expertise on offensive security.
  • Stay current with emerging threats, vulnerabilities, and attack techniques by leveraging threat intelligence, security research, and participation in relevant industry groups.
  • Contribute to the continuous improvement of penetration testing methodologies, tools, and frameworks to enhance effectiveness and alignment with firm strategy and regulatory requirements.

Required qualifications, capabilities, and skills
  • 5+ years of hands-on penetration testing experience in offensive security, with a proven track record of scoping, executing, and reporting on complex engagements.
  • Expertise in manual penetration testing of web, API, cloud (AWS/Azure/GCP), infrastructure, thick-client, and/or mobile (Android/iOS) applications, including the use of industry-standard tools (e.g., Burp Suite, Nmap, Metasploit, etc.).
  • Working knowledge of testing approaches for connected devices/IoT and purpose-built banking devices (e.g., ATMs, POS), including common attack surfaces such as exposed services, remote administration paths, authentication/authorization, hardening gaps, and insecure configurations.
  • Strong understanding of security assessment methodologies such as OWASP Top Ten, NIST Cybersecurity Framework, and other relevant standards.
  • Ability to identify and articulate systemic security issues related to threats, vulnerabilities, and risks, and provide clear, actionable recommendations for remediation.
  • Exceptional organizational and communication skills, including the ability to write detailed technical reports and present findings to both technical and non-technical stakeholders.
  • Experience conducting peer reviews of penetration test reports and mentoring junior testers.
  • Continuous learner who keeps up with the latest offensive security trends, tools, and techniques.

Preferred qualifications, capabilities, and skills
  • Knowledge of cybersecurity practices, operational risk management, and incident response methodologies within the US financial services sector, including relevant regulations, threats, and risks.
  • Proficiency in penetration testing and security concepts for both Windows and Unix-like operating systems.
  • Experience conducting security-focused source code reviews (e.g., Python, Java, Rust).
  • Experience in reverse engineering thick-client and mobile applications to identify vulnerabilities.
  • Experience assessing embedded systems / IoT devices in lab or onsite environments (e.g., device interface review, firmware/configuration analysis, and network/service exposure testing) relevant to ATM/POS ecosystems.
  • Relevant certifications such as OSWE, CREST (CRT, CCT), OSCP, OSCE, GXPN, GWAPT, GPEN, GMOB, or BSCP.

#CTC
About Us
JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world's most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.
We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.
We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.
JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/Veterans
About the Team
Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we're setting our businesses, clients, customers and employees up for success.

What JPMorgan Chase & Co. employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply