At EX Squared LATAM, we partner with leading organizations across integral and regional markets to connect exceptional professionals with high-impact career opportunities.

Our client is a leading global organization in the professional services and consulting industry, supporting businesses with complex technology, cybersecurity, risk, compliance, and transformation initiatives.

For this position, EX Squared LATAM is supporting our client with the recruitment and selection process. The selected professional will be hired directly by the client under their local payroll in Mexico, becoming part of their internal team.

Role Overview

We’re currently looking for a Penetration Testing Manager - Cyber Assessment to perform advanced, hands-on penetration testing and security assessment engagements across complex application, network, infrastructure, and cloud environments.

Despite the Manager title, this position is an Individual Contributor role with no direct reports or people-management responsibilities. The focus is on deep technical expertise, independent execution, stakeholder communication, and the ability to identify, validate, exploit, and clearly communicate security vulnerabilities.

Candidates must bring at least 5 years of hands-on Penetration Testing experience, with Pentesting as a primary/core responsibility. A broader Cybersecurity background where Penetration Testing has only been an occasional or secondary responsibility will not meet the requirements for this role.

Location

Mexico. Candidates located in Mexico City or Guadalajara are highly preferred.

- For professionals based in Mexico City or Guadalajara,



the position follows a hybrid model with onsite attendance approximately 2–3 days per week.
- Candidates based in other cities in Mexico may be considered for a remote arrangement; however, Mexico City and Guadalajara profiles will receive priority.

Contract Duration

Permanent, direct employment with the client.

This is a 100% payroll position in Mexico.

Working Hours

This position operates under 10-hour shifts, with one of the following schedules:

- Sunday through Wednesday, or
- Wednesday through Saturday.

Available shifts are:

- 7:00 a.m. – 5:00 p.m., or
- 1:00 p.m. – 11:00 p.m.

Candidates must be comfortable working within one of these schedules.

Language Requirement

Advanced English – C1 level.

The role requires candidates to conduct technical discussions, explain security findings, and collaborate directly with U.S.-based teams and stakeholders in English.

What you'll do

- Conduct detailed application, API, network, infrastructure, and cloud penetration testing engagements to identify exploitable vulnerabilities, security control gaps, and remediation opportunities.
- Plan and execute penetration testing across web applications, APIs, internal and external networks, cloud-hosted environments, and supporting infrastructure.




- Perform hands-on vulnerability validation and exploitation beyond automated vulnerability scanning.
- Identify and assess vulnerabilities such as authentication and authorization weaknesses, injection vulnerabilities, business logic flaws, insecure configurations, and sensitive data exposure.
- Document findings with clear technical evidence, business impact, risk context, reproducible steps, and practical remediation recommendations.
- Support remediation efforts through technical discussions, retesting, and collaboration with application, infrastructure, and security teams.
- Communicate assessment results to both technical and non-technical stakeholders through reports, walkthroughs, and remediation discussions.
- Apply established security assessment methodologies and frameworks such as MITRE ATT&CK;, OWASP Top 10, OWASP API Security Top 10, and PTES.
- Use scripting and automation to improve security assessment and penetration testing activities.
- Stay current with emerging vulnerabilities, exploitation techniques, security tools, and penetration testing methodologies.
- Work independently on technically complex assessments while exercising strong analytical judgment.

What you'll bring

- 5+ years of hands-on Penetration Testing experience as a primary/core professional responsibility.
- Strong hands-on experience with API penetration testing.
- Experience conducting network and infrastructure penetration testing, including internal and external environments.
- Experience assessing cloud-hosted environments and a solid understanding of cloud security concepts.
- Proven ability to identify, validate, and exploit vulner

📌 Penetration Testing Manager (Centro)
🏢 Ex Squared Latam
📍 Centro