Senior Manager, Offensive Security

Delinea•Redwood City, CA

2d•$185,000 - $225,000•Remote

About The Position

Delinea’s Cybersecurity organization is seeking an experienced Senior Manager, Offensive Security to mature Delinea’s in-house Offensive Security program and lead its operation. The ideal candidate will be highly collaborative, working alongside Product Development, DevOps, IT, and SecOps teams to shape the future of Penetration Testing and Red Teaming at Delinea and continually test the security of our products and the enterprise. The Senior Manager, Offensive Security will embrace the opportunity to work across diverse platforms with a variety of tools and will play a key role as we continually improve our capabilities over time. They’ll work with an established team of talented and dedicated teammates to achieve our security objectives. This is a challenging and impactful role with the opportunity to work with both internal and external stakeholders. The candidate must be able to balance the right level of security with business objectives, communicate clearly with technical as well as non-technical audiences, and work to creatively solve complex problems.

Requirements

Bachelor's or Master's degree in Computer Science, Cybersecurity, Engineering, or a related technical field.
Minimum 7+ years of demonstrated, hands-on experience with internal and external web application, API, and network penetration testing to include writing and reviewing formal penetration test reports, documenting the test details and vulnerabilities, identifying risks, and noting strengths discovered.
3+ years of demonstrated experience building and leading technical product or offensive security teams, setting team objectives, and developing junior talent
Understanding of penetration testing methodology and frameworks (MITRE ATT&CK, OWASP, PTES) and hands-on experience with industry-standard offensive tooling, including Burp Suite, command-and-control frameworks such as Cobalt Strike or Sliver, and attack-path analysis tools such as BloodHound.
Skill in illustrating and explaining security vulnerabilities, including proof-of-concept demonstrations, to audiences with minimal expertise in security.
Experience in the areas of vulnerability identification, malware analysis, and current & emerging exploitation techniques.
Experience testing identity infrastructure and privileged access attack paths, including Active Directory, Entra ID, Kerberos abuse, and credential and secrets exposure.
Proficiency in source code review, leveraging findings to execute targeted attacks.
Proficiency in at least one scripting or programming language, such as Python, Go, or PowerShell, for tooling, automation, and exploit development.
Experience with Azure and AWS cloud-based infrastructure.
Experience testing containerized and cloud-native environments, including Kubernetes, infrastructure-as-code, and CI/CD pipeline security.

Nice To Haves

One or more of the following certifications: ARTE, eCPPT, eWPT, CARTS, CRTL, CRTO, CRTP, GPEN, GWAPT, OSCP, OSEP, OSWE, Pentest+, PNPT.
Experience working with high-security environments subject to regulations such as FedRAMP or ITAR.
Excellent analytical and problem-solving skills with keen attention to detail.
Experience assisting in CAPEC markups for threat models.
Experience both using AI and LLM-based agents and tooling in testing methodologies and testing AI and LLM-based features and agents, including prompt injection and the OWASP Top 10 for LLM Applications.

Responsibilities

Lead the effort to define and mature Delinea’s Offensive Security function. Provide technical expertise and shape the procedural and programmatic structure of our Penetration Testing and Red Teaming activities.
Lead a team of penetration test and offensive security engineers, setting expectations on performance, goals, and objectives, and providing mentorship and guidance to team members.
Lead internal and external penetration testing engagements from beginning to end, including (where needed) vendor selection, statements of work, budget ownership, planning, kickoff, testing, documentation, reporting, remediation, and follow-up.
Use real-world adversarial TTPs and tooling to test the security controls protecting Delinea’s enterprise and product environments by performing red/purple team assessments, including assumed breach tests and social engineering assessments.
Manage the operation of Delinea’s Product Security testing environments for use with internal and external resources and develop a framework in that environment for using frontier AI models in the evaluation of product sources and attack paths.
Develop comprehensive and actionable reports and presentations, including end-to-end exploit reproductions and attack chains, to technical and executive audiences.
Act as a subject matter expert on penetration testing methodologies, techniques, and procedures.
Build relationships across organizational boundaries to ensure that identified weaknesses are remediated and lessons learned are captured.
Ensure that the Offensive Security program meets Delinea’s compliance and customer commitments, such as SOC 2, ISO 27001, PCI DSS, and FedRAMP, and act as the offensive security point of contact for auditors and assessors.
Communicate effectively with stakeholders at all levels, translating technical findings into actionable insights and recommendations for both technical and non-technical audiences.
Work with Cybersecurity Program Management to define the metrics that measure program effectiveness, including testing coverage, finding severity trends, and time to remediate, and report to executive leadership on a regular cadence.