Offensive Security Lead

What you'll do

• Unify Penetration Testing and Red Team into a single offensive security function with shared standards and tradecraft.
• Set and execute an offensive security roadmap aligned with the company's risk profile and regulatory obligations.
• Build and scale AI-augmented capabilities for reconnaissance, vulnerability triage, exploit chaining, and report generation.
• Personally lead technical engagements including network, application, cloud, and AI penetration tests.
• Hire, coach, and mentor a team of penetration testers and red team operators while defining clear career paths.
• Define and report KPIs for coverage, finding severity, remediation velocity, and overall program ROI.
• Partner with internal security teams to ensure offensive findings drive real remediation and inform detection engineering.
• Manage external vendors for third-party penetration testing, red team execution, and security tooling.

What we're looking for

• 8+ years of experience in offensive security with hands-on experience in both penetration testing and red team/adversary emulation.
• 2+ years of experience directly managing or leading offensive security teams, ideally within a regulated industry.
• Proven experience designing and implementing AI-led or AI-assisted offensive security programs.
• Deep technical fluency across network, web/application, cloud (AWS/GCP/Azure), and mobile attack surfaces.
• Familiarity with adversary emulation frameworks (e.g., MITRE ATT&CK) and C2 tooling.
• Track record of building or maturing offensive security programs, including processes, tooling, metrics, and team structures.
• Strong written and verbal communication skills for presenting findings and strategy to engineering leaders and executives.
• Relevant certifications (OSCP, OSCE, OSEP, GPEN, GXPN, CRTO, or equivalent) (preferred).