Senior Manager, Offensive Security

1 мес. назад

185k–225k USD / yearUSASeniorRemote

penetration testingvulnerability assessmentsecurity auditingthreat modelingred teaming

Lead offensive security initiatives to enhance identity security platform's defense capabilities.

Обязанности

· Lead the effort to define and mature ’s Offensive Security function. Provide technical expertise and shape the procedural and programmatic structure of our Penetration Testing and Red Teaming activities.
· Lead a team of penetration test and offensive security engineers, setting expectations on performance, goals, and objectives, and providing mentorship and guidance to team members.
· Lead internal and external penetration testing engagements from beginning to end, including (where needed) vendor selection, statements of work, budget ownership, planning, kickoff, testing, documentation, reporting, remediation, and follow-up.
· Use real-world adversarial TTPs and tooling to test the security controls protecting ’s enterprise and product environments by performing red/purple team assessments, including assumed breach tests and social engineering assessments.
· Manage the operation of ’s Product Security testing environments for use with internal and external resources and develop a framework in that environment for using frontier AI models in the evaluation of product sources and attack paths.
· Develop comprehensive and actionable reports and presentations, including end-to-end exploit reproductions and attack chains, to technical and executive audiences.
· Act as a subject matter expert on penetration testing methodologies, techniques, and procedures.
· Build relationships across organizational boundaries to ensure that identified weaknesses are remediated and lessons learned are captured.
· Ensure that the Offensive Security program meets ’s compliance and customer commitments, such as SOC 2, ISO 27001, PCI DSS, and FedRAMP, and act as the offensive security point of contact for auditors and assessors.
· Communicate effectively with stakeholders at all levels, translating technical findings into actionable insights and recommendations for both technical and non-technical audiences.
· Work with Cybersecurity Program Management to define the metrics that measure program effectiveness, including testing coverage, finding severity trends, and time to remediate, and report to executive leadership on a regular cadence.

Другое

About : is a pioneer in securing human and machine identities through intelligent, centralized authorization, empowering organizations to seamlessly govern their interactions across the modern enterprise. Leveraging AI-powered intelligence, ’s leading cloud-native Identity Security Platform applies context throughout the entire identity lifecycle – across cloud and traditional infrastructure, data, SaaS applications, and AI. It is the only platform that enables you to discover all identities – including workforce, IT administrator, developers, and machines – assign appropriate access levels, detect irregularities, and respond to threats in real-time. With deployment in weeks, not months, 90% fewer resources to manage than the nearest competitor, and a 99.995% uptime,
Join our passionate, global team at and help us make the world a safer and more secure place. Our success is driven by world-class product leadership, outstanding engineers, and strategic investment from TPG. We value diversity, innovation, and a culture of respect and fairness. If you're ready to push boundaries and challenge the status quo in security, we want to hear from you.
Apply today to help us achieve our mission.
’s Cybersecurity organization is seeking an experienced Senior Manager, Offensive Security to mature ’s in-house Offensive Security program and lead its operation. The ideal candidate will be highly collaborative, working alongside Product Development, DevOps, IT, and SecOps teams to shape the future of Penetration Testing and Red Teaming at and continually test the security of our products and the enterprise. The Senior Manager, Offensive Security will embrace the opportunity to work across diverse platforms with a variety of tools and will play a key role as we continually improve our capabilities over time. They’ll work with an established team of talented and dedicated teammates to achieve our security objectives.
This is a challenging and impactful role with the opportunity to work with both internal and external stakeholders. The candidate must be able to balance the right level of security with business objectives, communicate clearly with technical as well as non-technical audiences, and work to creatively solve complex problems.
This role reports to the Sr. Director of Product Security, is based in the US, and is fully remote.
· Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Engineering, or a related technical field.
· Minimum 7+ years of demonstrated, hands-on experience with internal and external web application, API, and network penetration testing to include writing and reviewing formal penetration test reports, documenting the test details and vulnerabilities, identifying risks, and noting strengths discovered.
· 3+ years of demonstrated experience building and leading technical product or offensive security teams, setting team objectives, and developing junior talent
· Understanding of penetration testing methodology and frameworks (MITRE ATT&CK, OWASP, PTES) and hands-on experience with industry-standard offensive tooling, including Burp Suite, command-and-control frameworks such as Cobalt Strike or Sliver, and attack-path analysis tools such as BloodHound.
· Skill in illustrating and explaining security vulnerabilities, including proof-of-concept demonstrations, to audiences with minimal expertise in security.
· Experience in the areas of vulnerability identification, malware analysis, and current & emerging exploitation techniques.
· Experience testing identity infrastructure and privileged access attack paths, including Active Directory, Entra ID, Kerberos abuse, and credential and secrets exposure.
· Proficiency in source code review, leveraging findings to execute targeted attacks.
· Proficiency in at least one scripting or programming language, such as Python, Go, or PowerShell, for tooling, automation, and exploit development.
· Experience with Azure and AWS cloud-based infrastructure.
· Experience testing containerized and cloud-native environments, including Kubernetes, infrastructure-as-code, and CI/CD pipeline security.
· One or more of the following certifications: ARTE, eCPPT, eWPT, CARTS, CRTL, CRTO, CRTP, GPEN, GWAPT, OSCP, OSEP, OSWE, Pentest+, PNPT.
· Experience working with high-security environments subject to regulations such as FedRAMP or ITAR.
· Excellent analytical and problem-solving skills with keen attention to detail.
· Experience assisting in CAPEC markups for threat models.
· Experience both using AI and LLM-based agents and tooling in testing methodologies and testing AI and LLM-based features and agents, including prompt injection and the OWASP Top 10 for LLM Applications.
For this Job, is not considering candidates that need any type of US work authorization now or in the future. This includes, but is not limited to: F1-OPT, F1-CPT, H-1B, TN, L-1, J1, etc.
#LI-MF1
We're passionate problem-solvers helping the world's largest organizations protect what matters most: their human and machine identities.
We invest in people who are smart, self-motivated, and collaborative.
What we offer in return is meaningful work, a culture of innovation and great career progression.
Spirited - We bring energy and passion to everything we do
Trust - We act with integrity and deliver on our commitments
Respect - We listen, value different perspectives, and work as one team
Ownership - We take initiative and follow through
Nimble - We adapt quickly in a fast-changing environment
Global - We embrace diverse people and ideas to drive better outcomes
We believe weaving these core values into our day-to-day actions, and our process for hiring, evaluating, and promoting employees, helps us cultivate a work environment that embraces collaboration and camaraderie.
We take care of our employees. We offer competitive salaries, a meaningful bonus program, and excellent benefits, including healthcare insurance, as well as pension/retirement matching, comprehensive life insurance, an employee assistance program, time off plans, and paid company holidays.
is an Equal Opportunity and Affirmative Action employer and prohibits discrimination and harassment of any type with regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
Upon conditional offer of employment, candidates are required to complete comprehensive criminal background check, verification of education, and verification of employment, per employment policy. In addition, all publicly posted social media sites may be reviewed.