About this role
Trading Technologies is seeking an organized, process-driven, and highly communicative Offensive Security Manager to lead our internal Offensive Security (Offsec) team. In this role, you will act as the crucial bridge between our security initiatives and our engineering teams. While this is primarily a management and operational role rather than a hands-on technical hacking position, you will need a solid foundational understanding of penetration testing methodologies and vulnerability lifecycles to be successful.
You will own the penetration testing schedule, manage critical vendor relationships, and drive our vulnerability management program to ensure that identified risks in TT’s platforms, systems, and applications are effectively communicated and remediated on time. Team Leadership: Manage, mentor, and support a small, dedicated team of internal penetration testers and offensive security professionals whose core mission is to proactively identify vulnerabilities across TT’s environment.
Schedule & Engagement Management: Own and orchestrate the comprehensive penetration testing schedule, seamlessly coordinating engagements for both our internal testers and third-party vendors to ensure continuous coverage. Vendor Management: Manage relationships with external third-party penetration testing vendors. This includes scoping engagements, managing budgets, reviewing proposals, and ensuring the quality and timely delivery of external reports. Engineering Liaison: Serve as the primary point of contact and relationship owner between the Offensive Security team and TT's Engineering and Product teams.
Foster a collaborative culture of "security as a partner." Vulnerability Management: Play a leading role in the vulnerability management lifecycle. Work directly with engineering to triage findings, establish remediation plans, and ensure vulnerabilities are patched within established Service Level Agreements (SLAs) and deadlines. Metrics & Reporting: Track, measure, and report on key performance indicators (KPIs) related to penetration testing coverage, vulnerability identification rates, and remediation timelines to executive leadership. Process Improvement: Continuously refine and streamline offensive security workflows, reporting mechanisms, and cross-departmental engagement models to make security testing smoother and more efficient.