Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
развернуть
По международному рынку данных пока нет
На СНГ рынке: $5.3к/мес ($3.7к - $6.3к)
86
Хорошая вакансия
развернуть
Чётко очерченная руководящая роль в сфере безопасности в зрелой финтех-продуктовой компании, с хорошими льготами и понятной зоной ответственности; гибридный график и привязка к Праге ограничивают гибкость.
Привязка к Праге
Понятная зона ответственности
Финтех-продукт
Хороший пакет льгот
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Offensive Security Manager (FinTech): Leading an internal offensive security team and coordinating penetration testing, vendor engagements, and vulnerability remediation across a SaaS trading platform with an accent on security operations, engineering collaboration, and risk communication. Focus on managing testing schedules, driving SLA-based remediation, improving security workflows, and reporting coverage and remediation KPIs to executive leadership.
Location: Prague, Czech Republic; hybrid, with three days in the office and two remote days per week
Salary: Kč1,800,000–Kč2,575,000 per year
Company
hirify.global provides SaaS capital markets and trading technology for banks, brokerages, asset managers, hedge funds, traders, exchanges, and other financial market participants.
What you will do
Lead, mentor, and support a team of internal penetration testers and offensive security professionals.
Own and coordinate the penetration testing schedule across internal testers and third-party vendors.
Act as the primary liaison between Offensive Security, Engineering, and Product teams.
Coordinate vulnerability triage, remediation plans, SLA tracking, and patch deadlines with Engineering.
Track security KPIs, report to executive leadership, and improve offensive security workflows and reporting.
Requirements
Deep understanding of penetration testing workflows, methodologies, and engagement lifecycles, including scoping, execution, reporting, and remediation tracking.
Proven experience managing teams, projects, or programs, preferably in Information Security or Technology.
Experience selecting, onboarding, and managing external security testing vendors or consultancies.
Exceptional interpersonal and communication skills, including translating security risks into engineering tasks, negotiating deadlines, handling pushback, and driving cross-functional consensus.
Excellent project and organizational skills, with the ability to manage multiple assessments, remediation trackers, and vendor timelines.
Nice to have
Basic technical awareness of common vulnerabilities and attack vectors, including OWASP Top 10 and CWEs.
Familiarity with Agile, DevOps, SDLC, and integrating security testing into fast-paced engineering environments.
Management or security certifications such as CISM, PMP, Security+, or CISSP.
Previous experience in financial technology or the trading industry.
Culture & Benefits
Permanent full-time employment in a collaborative, diversity- and inclusion-focused organization.
Hybrid work model with three in-office days and two remote days per week.
Pension contributions, 25 days of paid time off with rollover, parental leave, and milestone anniversary PTO.
Volunteering and professional development days, plus a technology equipment budget.
Milestone bonuses and subsidies for gym memberships and health and wellness initiatives.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →