At EX Squared LATAM, we partner with leading organizations across general and regional markets to connect exceptional professionals with high-impact career opportunities.

Our client is a leading global organization in the professional services and consulting industry, supporting businesses with complex technology, cybersecurity, risk, compliance, and transformation initiatives.

For this position, EX Squared LATAM is supporting our client with the recruitment and selection process. The selected professional will be hired directly by the client under their local payroll in Mexico, becoming part of their internal team.

Role Overview

We are currently seeking a Cybersecurity Penetration Manager to lead advanced, hands‑on penetration testing and security assessment engagements across complex application, network, infrastructure, API, and cloud environments.

This is an individual contributor position with no direct reports or people‑management responsibilities. The role requires strong technical depth, independent execution, effective stakeholder communication, and the ability to identify, validate, exploit, document, and clearly communicate security vulnerabilities and their potential business impact.

Location

- For professionals based in Mexico City or Guadalajara, the position follows a hybrid model with onsite attendance approximately 2–3 days per week.
- Candidates based in other cities in Mexico may be considered for a remote arrangement; however, Mexico City and Guadalajara profiles will receive priority.

Contract Duration

Permanent, direct employment with the client.

Working Hours

Monday through Friday, either 7:00 a.m.–4:00 p.m. or 8:00 a.m.–5:00 p.m. Eastern Time.





Language Requirement

Advanced English.

What you'll do

- Conduct detailed application, API, network, infrastructure, and cloud penetration testing engagements to identify exploitable vulnerabilities, security control gaps, and remediation opportunities.
- Plan and execute penetration testing across web applications, APIs, internal and external networks, cloud‑hosted environments, and supporting infrastructure.
- Perform hands‑on vulnerability validation and exploitation beyond automated vulnerability scanning.
- Identify and assess vulnerabilities such as authentication and authorization weaknesses, injection vulnerabilities, business logic flaws, insecure configurations, and sensitive data exposure.
- Document findings with clear technical evidence, business impact, risk context, reproducible steps, and practical remediation recommendations.
- Support remediation efforts through technical discussions, retesting, and collaboration with application, infrastructure, and security teams.
- Communicate assessment results to both technical and non‑technical stakeholders through reports, walkthroughs, and remediation discussions.
- Apply established security assessment methodologies and frameworks such as MITRE ATT&CK;, OWASP Top 10, OWASP API Security Top 10, and PTES.




- Use scripting and automation to improve security assessment and penetration testing activities.
- Stay current with emerging vulnerabilities, exploitation techniques, security tools, and penetration testing methodologies.
- Work independently on technically complex assessments while exercising strong analytical judgment.

What you'll bring

- 5+ years of hands‑on Penetration Testing experience as a primary/core professional responsibility.
- Strong hands‑on experience with API penetration testing.
- Experience conducting network and infrastructure penetration testing, including internal and external environments.
- Experience assessing cloud‑hosted environments and a solid understanding of cloud security concepts.
- Proven ability to identify, validate, and exploit vulnerabilities rather than relying exclusively on automated scanning tools.
- Strong familiarity with MITRE ATT&CK;, OWASP Top 10, OWASP API Security Top 10, PTES, or similar methodologies.
- Experience with penetration testing, vulnerability scanning, exploitation, and security assessment tools.
- Proficiency in scripting and automation, using technologies such as Python, Bash, or PowerShell.
- Strong understanding of security principles, IT security controls, remediation practices, and common and emerging security threats.
- Ability to clearly document and explain technical vulnerabilities, their practical impact, and recommended remediation.
- Experience working directly with clients, project stakeholders, application teams, or business units.
- Strong verbal and written communication, analytical thinking, probl

📌 Cybersecurity Penetration Manager (Centro)
🏢 Ex Squared Latam
📍 Centro