Назад
Company hidden
9 дней назад

Offensive Security Manager (Cybersecurity)

Формат работы
hybrid
Тип работы
fulltime
Грейд
lead
Английский
b2
Страна
UK
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Offensive Security Manager (Cybersecurity): Leading internal offensive security operations, coordinating penetration testing, managing vendors, and driving vulnerability remediation across trading platforms and applications with an accent on security workflows, engineering collaboration, and operational delivery. Focus on managing testing coverage, translating findings into remediation plans, tracking SLAs and KPIs, and improving cross-functional security processes.

Location: Belfast, United Kingdom; hybrid schedule with three days in the office and two remote days per week.

Company

hirify.global is a SaaS capital markets platform services company providing end-to-end trading technology, data and analytics, compliance, clearing, post-trade, and infrastructure solutions to financial institutions and trading organizations.

What you will do

  • Lead, mentor, and support a small internal team of penetration testers and offensive security professionals.
  • Own and coordinate the penetration testing schedule across internal testers and third-party vendors.
  • Scope external engagements, manage vendor relationships and budgets, review proposals, and ensure timely, high-quality reports.
  • Act as the primary liaison between Offensive Security, Engineering, and Product teams.
  • Coordinate vulnerability triage, remediation plans, SLA tracking, and timely patching with Engineering.
  • Track penetration testing and vulnerability metrics, report KPIs to executive leadership, and improve security workflows.

Requirements

  • Deep understanding of penetration testing workflows, methodologies, and engagement lifecycles, including scoping, execution, reporting, and remediation tracking.
  • Proven experience managing teams, projects, or programs, preferably in Information Security or Technology.
  • Experience selecting, onboarding, and managing external security testing vendors or consultancies.
  • Strong interpersonal and communication skills, including translating security risks into engineering tasks, negotiating deadlines, handling pushback, and building consensus.
  • Excellent project management and organizational skills, with the ability to manage multiple assessments, remediation trackers, and vendor timelines.

Nice to have

  • Basic technical awareness of common vulnerabilities and attack vectors, including OWASP Top 10 and CWEs.
  • Understanding of SDLC and integrating security testing into Agile or DevOps environments.
  • Relevant management or security certifications such as CISM, PMP, Security+, or CISSP.
  • Experience in financial technology or the trading industry.

Culture & Benefits

  • Hybrid work model balancing office collaboration with remote work.
  • Pension contributions and 25 days of paid time off, with rollover options.
  • One volunteering day, two professional development days, milestone anniversary PTO and bonuses, and generous parental leave.
  • Budget for technology accessories and office equipment.
  • Gym membership and health and wellness subsidies, including healthcare and lifestyle support.
  • Collaborative, diversity-focused culture with opportunities for mentorship and professional growth.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →