Manager of Offensive Security (Cybersecurity)

TL;DR

Manager of Offensive Security (Cybersecurity): Leading and growing a team across red team operations, application security, and vulnerability management with an accent on adversary simulation and cloud security assessments. Focus on maturing the bug bounty program, implementing technical security controls in the SDLC, and translating technical risks into executive insights.

Location: Hybrid (Warsaw, Poland). Must be based in the Warsaw office with an office-centric hybrid schedule.

Salary: 43,500 - 49,500 PLN gross per month

Company

Asana is a leading platform for human + AI collaboration used by millions of teams worldwide to achieve their goals faster.

What you will do

• Lead, grow, and mentor a team of offensive security engineers covering red team, application security, and vulnerability management.
• Define the team roadmap, OKRs, and priorities in alignment with broader security and engineering strategy.
• Plan and execute red team operations and adversary simulation exercises across infrastructure, products, and corporate environments.
• Perform cloud security assessments and oversee security architecture reviews and threat modeling for new features.
• Own and operate the bug bounty program and mature vulnerability management across software and infrastructure.
• Implement technical security controls within the SDLC, including PR blockers and automated pipeline gates.

Requirements

• 8+ years of experience in offensive security or application security with depth in red team operations or web penetration testing.
• 3+ years of experience managing and mentoring a team of security engineers while remaining technically active.
• Deep technical expertise in modern web application security (OWASP Top 10) and cloud security assessments.
• Ability to read and understand source code in Python, Java, JavaScript/TypeScript, Go, or C/C++.
• Proven track record of operating vulnerability management programs and bug bounty ownership at scale.
• Must be based in Warsaw, Poland to adhere to the office-centric hybrid schedule.

Nice to have

• Curiosity and willingness to leverage AI tools and emerging technologies to enhance productivity and decision-making.

Culture & Benefits

• Transparent compensation system including base salary and RSUs.
• Employment contract (UoP) with options for tax-deductible costs for author's rights.
• Comprehensive health insurance (Lux Med) with dental and travel coverage.
• Office perks including breakfast and lunch catering on in-office days.
• Wellness support via Gym/Fitness cards, fertility healthcare (Carrot), and mental health support (Modern Health).
• Practical support including home office setup budget and career growth budget.