Manager, Offensive Security

Gainsight

1d•$145,000 - $165,000•Remote

About The Position

We’re looking for a full-time Manager, Offensive Security to join our name of team team reporting to the Chief Security Officer. This role is a remote role based in the United States. In this role, you’ll play a key role in by performing Red and Purple Team assessments, including adversarial emulation of cyber attacks against customer organizations, and other technical cyber assessments including external pen testing, web application, mobile, and wireless security testing. You will expand the team’s capabilities through tool creation, research on offensive techniques, incorporation of threat actor intelligence, internal presentations, and knowledge sharing. This is a great opportunity for someone who thrives in a high performing growth environment and enjoys working cross-functionally with teams like engineering, IT, legal and product.

Requirements

5-7 years of relevant experience (or equivalent combination of education and experience), including recent management experience required.
5 years of experience with pen testing and red teaming functions, including network, web application, mobile, cloud, social engineering, scripting, or tool development.
Experience with tools used for wireless, web application, and network security testing.

Nice To Haves

Certifications related to offensive security including OSCE, OSEP, OSEE, OSCP, CCSAS, CCT, INF, or relevant SANS courses.
Experience implementing or assessing information security implementation or assessment of security controls.

Responsibilities

Perform red and purple team assessments, assumed breach assessments (e.g., red team engagements with a pre-deployed implant), ransomware readiness reviews (e.g., assessing susceptibility to modern ransomware threats), threat analysis, and social engineering assessments.
Conduct external and internal wireless assessments, web and mobile applications testing, and embedded system assessments.
Recognize and safely utilize attacker tools, tactics, and procedures.
Develop comprehensive and accurate reports and presentations for both technical and executive audiences.
Perform offensive technical cyber security engagements of a varied nature.
This role may require occasional travel (up to 10%) for team meetings, training, or company events.
This is not a complete list of responsibilities, and the scope of the role may evolve with the needs of the team and business.