Назад
Company hidden
6 дней назад

Offensive Security Manager (FinTech)

1 800 000 - 2 575 000CZK
Формат работы
hybrid
Тип работы
fulltime
Грейд
lead
Английский
b2
Страна
CR
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Offensive Security Manager (FinTech): Leading an internal offensive security team and coordinating penetration testing, vendor engagements, and vulnerability remediation across a SaaS trading platform with an accent on security operations, engineering collaboration, and risk communication. Focus on managing testing schedules, driving SLA-based remediation, improving security workflows, and reporting coverage and remediation KPIs to executive leadership.

Location: Prague, Czech Republic; hybrid, with three days in the office and two remote days per week

Salary: Kč1,800,000–Kč2,575,000 per year

Company

hirify.global provides SaaS capital markets and trading technology for banks, brokerages, asset managers, hedge funds, traders, exchanges, and other financial market participants.

What you will do

  • Lead, mentor, and support a team of internal penetration testers and offensive security professionals.
  • Own and coordinate the penetration testing schedule across internal testers and third-party vendors.
  • Scope vendor engagements, manage budgets, review proposals, and ensure timely, high-quality external reports.
  • Act as the primary liaison between Offensive Security, Engineering, and Product teams.
  • Coordinate vulnerability triage, remediation plans, SLA tracking, and patch deadlines with Engineering.
  • Track security KPIs, report to executive leadership, and improve offensive security workflows and reporting.

Requirements

  • Deep understanding of penetration testing workflows, methodologies, and engagement lifecycles, including scoping, execution, reporting, and remediation tracking.
  • Proven experience managing teams, projects, or programs, preferably in Information Security or Technology.
  • Experience selecting, onboarding, and managing external security testing vendors or consultancies.
  • Exceptional interpersonal and communication skills, including translating security risks into engineering tasks, negotiating deadlines, handling pushback, and driving cross-functional consensus.
  • Excellent project and organizational skills, with the ability to manage multiple assessments, remediation trackers, and vendor timelines.

Nice to have

  • Basic technical awareness of common vulnerabilities and attack vectors, including OWASP Top 10 and CWEs.
  • Familiarity with Agile, DevOps, SDLC, and integrating security testing into fast-paced engineering environments.
  • Management or security certifications such as CISM, PMP, Security+, or CISSP.
  • Previous experience in financial technology or the trading industry.

Culture & Benefits

  • Permanent full-time employment in a collaborative, diversity- and inclusion-focused organization.
  • Hybrid work model with three in-office days and two remote days per week.
  • Pension contributions, 25 days of paid time off with rollover, parental leave, and milestone anniversary PTO.
  • Volunteering and professional development days, plus a technology equipment budget.
  • Milestone bonuses and subsidies for gym memberships and health and wellness initiatives.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →