Penetration Testing Team Lead (Cybersecurity)

TL;DR

Penetration Testing Team Lead (Cybersecurity): Leading and growing the Offensive Security function while maintaining a strong hands-on role in identifying critical business logic vulnerabilities and attack paths. Focus on building the offensive security capabilities from the ground up, performing deep-dive manual penetration testing, and leading purple team exercises with SOC/Blue Teams.

Location: Office-based in Yerevan, Armenia

Company

hirify.global is a global company creating end-to-end tech products for clients across Fintech, iGaming, and Marketing.

What you will do

• Build the Offensive security function, defining methodologies, reporting standards, and hiring plans for team expansion.
• Recruit, mentor, and develop a team of offensive security engineers, ensuring technical excellence and consistent delivery.
• Perform deep-dive manual penetration testing for complex, high-risk, or business-critical assets.
• Lead and coordinate purple team exercises, simulating real-world attacks to validate detection capabilities.
• Collaborate with the Application Security Team to validate vulnerabilities and guide remediation strategies.
• Act as a subject matter expert in security architecture, secure design, and security code reviews.

Requirements

• 5+ years of hands-on experience in Penetration Testing, including web, mobile, API, and cloud environments (AWS, Azure, GCP).
• Experience building offensive security processes, methodologies, or tools from scratch.
• Strong "playing coach" mindset with willingness to remain highly hands-on (70-80%).
• Deep understanding of penetration testing methodologies and frameworks (OWASP Top 10, SANS Top 25).
• Demonstrated experience contributing to purple team exercises and working with SOC to improve detection logic.
• Strong hands-on experience with industry-standard tools (Burp Suite Pro, Metasploit, Nmap) and ability to develop custom automation (Python, Go, PowerShell, Bash).

Nice to have

• Advanced certifications such as OSCP, OSCE, OSWE, CRTP, or SANS GIAC.
• Experience in fast-growing Gaming/Fintech companies with exposure to industry-specific security challenges.

Culture & Benefits

• Career growth opportunities in an international and dynamic environment.
• Opportunity to develop language skills with partial compensation for language courses.
• 20 working days of paid annual vacation, plus paid sick leaves.
• Office snacks, refreshments, and a sports package.
• Comprehensive medical insurance for you and your partner.
• Comfortable office with great facilities in a prime location.