Offensive Security Manager

Key Responsibilities

• Team Leadership: Manage, mentor, and support a small, dedicated team of internal penetration testers and offensive security professionals whose core mission is to proactively identify vulnerabilities across TT’s environment.
• Schedule & Engagement Management: Own and orchestrate the comprehensive penetration testing schedule, seamlessly coordinating engagements for both our internal testers and third-party vendors to ensure continuous coverage.
• Vendor Management: Manage relationships with external third-party penetration testing vendors. This includes scoping engagements, managing budgets, reviewing proposals, and ensuring the quality and timely delivery of external reports.
• Engineering Liaison: Serve as the primary point of contact and relationship owner between the Offensive Security team and TT's Engineering and Product teams. Foster a collaborative culture of "security as a partner."
• Vulnerability Management: Play a leading role in the vulnerability management lifecycle. Work directly with engineering to triage findings, establish remediation plans, and ensure vulnerabilities are patched within established Service Level Agreements (SLAs) and deadlines.
• Metrics & Reporting: Track, measure, and report on key performance indicators (KPIs) related to penetration testing coverage, vulnerability identification rates, and remediation timelines to executive leadership.
• Process Improvement: Continuously refine and streamline offensive security workflows, reporting mechanisms, and cross-departmental engagement models to make security testing smoother and more efficient.

Skills, Knowledge and Expertise

• Cybersecurity Workflow Knowledge: Deep understanding of penetration testing workflows, methodologies, and engagement lifecycles (e.g., scoping, execution, reporting, remediation tracking).
• Leadership & Management: Proven experience managing teams, projects, or programs, preferably within an Information Security or Technology department.
• Vendor Management Experience: Previous experience selecting, onboarding, and managing external security testing vendors or consultancies.
• Exceptional Communication: Strong interpersonal skills with the ability to translate security risks into actionable engineering tasks. You must be able to negotiate deadlines, handle pushback, and drive consensus across cross-functional teams.
• Organizational Skills: Excellent project management skills, with the ability to juggle multiple ongoing security assessments, remediation trackers, and vendor timelines simultaneously.
• Preferred Qualifications (Beneficial but not strictly required):

• Vulnerability Awareness: A basic technical awareness and understanding of common vulnerabilities and attack vectors (e.g., OWASP Top 10, CWEs) to facilitate informed conversations with both hackers and developers.
• Familiarity with Agile/DevOps: Understanding of modern software development lifecycles (SDLC) and how to integrate security testing into fast-paced engineering environments.
• Industry Certifications: Relevant management or security certifications (e.g., CISM, PMP, Security+, CISSP) are a plus.
• FinTech Experience: Previous experience working in the financial technology or trading industry.

Benefits

• Health & Financial Security:
  • Pension contributions
• Time Off & Flexibility:
  • Enjoy the best of both worlds: the energy and collaboration of in-person work, combined with the convenience and focus of remote days. This is a hybrid position requiring three days of in-office collaboration per week, with the flexibility to work remotely for the remaining two days. Our hybrid model is designed to balance individual flexibility with the benefits of in-person collaboration, enhanced team cohesion, spontaneous innovation, hands-on mentorship opportunities and strengthens our company culture.
  • 25 days of Paid Time Off (PTO) per year, with the option to roll over unused days.
  • One dedicated day per year for volunteering.
  • Two professional development days per year to allow uninterrupted professional development.
  • An additional PTO day added during milestone anniversary years.
  • Generous parental leave for all parents (including adoptive parents).
• Work-Life Support & Resources:
  • Budget for tech accessories, including monitors, headphones, keyboards, and other office equipment.
  • Milestone anniversary bonuses.
• Wellness & Lifestyle Perks:
  • Subsidy contributions toward gym memberships and health/wellness initiatives (including discounted healthcare premiums, healthy meal delivery programs, or smoking cessation support).
• Our Culture:
• Forward-thinking, culture-based organization with collaborative teams that promote diversity and inclusion.

About
Trading Technologies is a Software-as-a-Service (SaaS) technology platform provider to the global capital markets industry. The company’s award-winning TT® platform connects to the world’s major international exchanges and liquidity venues in listed derivatives alongside a growing number of asset classes, including fixed income and cryptocurrencies. The TT platform delivers advanced tools for trade execution and order management, market data solutions, analytics, trade surveillance, risk management, and infrastructure services to the world’s leading sell-side institutions, buy-side firms, and exchanges. The company’s blue-chip client base includes Tier 1 banks as well as brokers, money managers, hedge funds, proprietary traders, Commodity Trading Advisors (CTAs), commercial hedgers, and risk managers. These firms rely on the TT ecosystem to manage their end-to-end trading operations. In addition, exchanges utilize TT’s technology to deliver innovative solutions to their market participants. TT also strategically partners with technology companies to make their complementary offerings available to Trading Technologies’ global client base through the TT ecosystem.