Role: Lead Penetration Tester Location: Remote (must be located in U.S.) About Rhymetec: Rhymetec is an industry leader in the MSSP cybersecurity space. Our goal is to simplify cybersecurity for our clients so they can become compliant faster and focus more on their business and less on the complexities of building effective and compliant infosec programs. Description: The Lead Penetration Tester is an experienced offensive security professional who reports directly to the Director of Offensive Security. In this client-facing role, you will lead and execute penetration testing engagements for MSSP customers, serve as an escalation point for other penetration testers, and help ensure high-quality, defensible deliverables across the team Responsibilities: Lead and execute penetration tests primarily across web applications, external APIs, and networks, performing manual testing, exploitation, and validation beyond automated scanning. Serve as the primary escalation point for other penetration testers to unblock investigations, validate exploitation paths, and review findings for accuracy and consistency. Conduct scoping calls with customers, confirm rules of engagement, and manage the pentest lifecycle. Present findings to engineering teams and executive stakeholders, translating technical issues into remediation priorities. Contribute to internal offensive security tooling, playbooks, templates, and scripts. Required Minimum Qualifications: Benefits: Rhymetec offers a robust employee package, including: Supportive leadership and a clear growth path 100% of employee medical premiums are covered by the employer and discounted family insurance options Dental and Vision Benefits PTO and Sick Time + 11 paid Holidays 401K retirement option with company match Company-paid Life Insurance Annual Subscription to TalkSpace (online counseling & therapy service) Compensation may vary outside of the range depending on several factors, including a candidate's qualifications, skills, competencies, experience, and location. Base pay is one part of the Total Package provided to compensate and recognize employees for their work, and this role may be eligible for additional discretionary bonuses/incentives. Rhymetec is committed to creating a diverse environment and is proud to be an equal-opportunity employer. All qualified applicants will be considered for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

• supports the Case Management Modernization (CMM) Program for the Administrative Office of the U.S. Courts (AO) by overseeing all aspects of quality assurance (QA), testing governance, and compliance verification across Agile and DevSecOps teams. • ensures that CMM application components meet stringent federal standards for quality, performance, and security. • establishes consistent quality frameworks, enforces traceability, and validates adherence to program-level policies, regulations, and modernization objectives. • Define and maintain test management standards, methodologies, and metrics aligned with Agile and SAFe delivery models. • Oversee functional, integration, regression, performance, and security testing activities across all CMM applications. • Ensure compliance with federal standards including Section 508 accessibility, FedRAMP security, and NIST controls. • Coordinate with Product Owners, Developers, and Automation Test Engineers to validate acceptance criteria and test coverage. • Establish and maintain traceability matrices linking requirements to test cases, defects, and validation artifacts. • Support independent verification and validation (IV&V) processes and compliance audits. • Review and approve test plans, results, and release readiness documents prior to production deployment. • Define and track QA metrics (defect density, test pass rates, mean time to resolution) to drive continuous improvement. • Promote shift-left testing, early defect detection, and alignment of QA practices with DevSecOps pipelines. • Provide oversight for quality-related documentation, ensuring audit readiness and adherence to SOW deliverables.

• Actively participates as a core team member of the R&D Quality Assurance Engineering team. • Strong understanding of, and ability to provide guidance on IEC 62304, 21 CFR 820, and other relevant regulations worldwide. • Lead in the effective application, compliance, and continuous improvement of policies, procedures, and practices related to software development and validation across software teams, including: Drive Pre-market risk management deliverables like SHA, design FMEA and support Cyber security risk management. • Provide guidance to Software Design and test teams, support Software configuration management, tool validations and software integrations. • Reviews and approves all software design control deliverables. • Support post market activities related to Software anomalies, risk assessments and CAPA activities (if applicable). • Lead and support R&D SW Design Assurance efforts including continuous improvement opportunities for products and processes. • Responsible for reviewing, authoring, and revising appropriate technical documentation including design history files, standard operating procedures, protocols, reports, etc. • Assesses the impact of change control to ensure no adverse impact on product performance and a state of compliance is maintained. • Effectively communicates with the broad Dexcom team and upper-level management on plans, status of tasks, project progress and challenges. • Assumes and performs other duties as assigned.

• Execute hands-on testing of web/mobile applications • Identify opportunities for cleaner code and process refinements • Collaborate with product teams to support testing strategies • Provide accurate estimates for testing efforts • Communicate test progress clearly • Support release cycles by contributing to scope planning • Engage with the Quality Practice Community