OFFENSIVE SECURITY – MANAGER

Role Overview
Lead enterprise offensive security engagements across web applications, APIs, networks, infrastructure, and cloud environments. Drive penetration testing, red teaming, adversary simulation, and remediation in partnership with Engineering, IT, and SOC/Blue Team teams.
Key Responsibilities
Lead penetration testing across web applications, APIs, microservices, networks, infrastructure, and cloud.
Conduct manual exploitation and controlled vulnerability validation.
Lead red team, adversary simulation, and purple team engagements.
Validate security detections and collaborate with SOC/Blue Teams.
Drive vulnerability remediation, retesting, and closure.
Prepare security reports covering risk, impact, evidence, and remediation.
Plan engagements based on business risk, asset criticality, and approved security scopes.
Communicate technical risks and security metrics to technical and business stakeholders.
Required Skills & Expertise
Web Application & API Security
Penetration Testing & Manual Exploitation
Network & Infrastructure Security
Red Team & Adversary Simulation
Purple Teaming & Detection Validation
Cloud Security Testing
Identity & Attack-Path Assessment
Python, Bash and/or PowerShell
Vulnerability Assessment & Remediation
Tools
Burp Suite Professional, OWASP ZAP, Postman, Nmap, Wireshark, Nessus, Metasploit, Cobalt Strike, BloodHound, Impacket, Trivy.
Preferred Certifications
OSCP | OSWE | CRTP | eWPT
Required Qualifications
8+ years of experience in cybersecurity with strong offensive security expertise.
Proven experience in enterprise penetration testing across applications, APIs, networks, and infrastructure.
Hands-on experience with red team/adversary simulation and purple teaming.
Strong scripting and security testing capabilities.
Ability to translate technical findings into actionable remediation.
Strong stakeholder management and communication skills.

Work arrangement
Hybrid