Manager, Offensive Security

Location: Hybrid in Austin, Texas, or Warren, Michigan; in-office attendance is required at least 3 times per week.

Company

hirify.global builds secure software and connected experiences for the automotive industry at scale.

What you will do

• Lead and develop a team responsible for penetration testing, adversary emulation, responsible disclosure triage, and security control validation.
• Own the offensive security roadmap, operating model, staffing plans, resource allocation, and performance indicators.
• Translate cybersecurity strategy into quarterly priorities and measurable execution goals.
• Partner with engineering, product, infrastructure, and cybersecurity leaders to prioritize risk and drive remediation.
• Establish scalable testing approaches for web applications, APIs, cloud services, identity systems, containers, developer tooling, and software delivery pipelines.
• Communicate significant risks, recommendations, and outcomes while leading cross-functional change.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent practical experience.
• 10+ years of cybersecurity experience, including 5+ years in offensive security, penetration testing, red teaming, application security testing, or related disciplines.
• 5+ years of people leadership experience, including hiring, performance management, coaching, workforce planning, and team development.
• 3+ years leading complex cross-functional security programs with measurable outcomes.
• Experience assessing modern attack surfaces across web, APIs, cloud, identity, containers, developer tooling, or software delivery pipelines.
• GM does not provide immigration-related sponsorship; candidates must not require GM immigration sponsorship now or in the future.

Nice to have

• Experience building offensive security programs in large-scale software, cloud, or product engineering environments.
• Familiarity with responsible disclosure, vulnerability intake, or bug bounty operations.
• Experience improving secure design, detection, and resilience based on offensive testing results.
• Knowledge of security automation, findings workflows, and telemetry-driven reporting.
• OSCP, OSWE, GPEN, GXPN, CISSP, or comparable certifications.

Culture & Benefits

• Mission focused on Zero Crashes, Zero Emissions, and Zero Congestion.
• Emphasis on inclusion, belonging, meaningful change, and equitable workplaces.
• Benefits support employee well-being at work and at home.
• Role may be eligible for relocation benefits.
• Pre-employment screening or role-related assessments may apply.