Offensive Security Manager

About the role

Lead enterprise offensive security engagements across web applications, APIs, networks, infrastructure and cloud environments. Work closely with Engineering, IT and SOC/Blue Team to drive penetration testing, red‑team operations, adversary simulations and remediation.

Key responsibilities

• Lead penetration testing for web applications, APIs, micro‑services, networks, infrastructure and cloud platforms.
• Conduct manual exploitation, controlled vulnerability validation and drive remediation cycles.
• Plan and execute red‑team, adversary‑simulation and purple‑team engagements, validating detection capabilities with SOC/Blue Teams.
• Prepare comprehensive security reports detailing risk, impact, evidence and remediation recommendations.
• Prioritise engagements based on business risk, asset criticality and approved security scopes.

Required profile

• 8+ years of cybersecurity experience with strong offensive security expertise.
• Proven track record in enterprise‑level penetration testing across applications, APIs, networks and infrastructure.
• Hands‑on experience with red‑team/adversary simulation and purple‑team activities.
• Excellent ability to translate technical findings into actionable remediation and communicate with both technical and business stakeholders.

Required skills

• Web application & API security, network & infrastructure security, cloud security testing.
• Penetration testing, manual exploitation, red‑team, adversary simulation, purple‑team detection validation.
• Scripting in Python, Bash or PowerShell.
• Tools: Burp Suite Professional, OWASP ZAP, Postman, Nmap, Wireshark, Nessus, Metasploit, Cobalt Strike, BloodHound, Impacket, Trivy.