This role sits at the intersection ofhands‑on offensive security, people leadership, and delivery excellence . You’ll work closely with Sales, Product, and Leadership to support scoping, improve delivery processes, and help evolve our service offerings as the business scales.Responsibilities Manage and execute offensive security engagementsOversee and contribute to penetration tests, red team activities, and advanced security assessments.Act as the technical escalation point for complex findings, edge cases, and client questions.Lead and mentor the offensive security teamManage a team of pentesters and security engineers, providing technical guidance, feedback, and career development.Foster a culture of learning, curiosity, and high professional standards.Ensure delivery quality and consistencyOwn engagement scoping, execution quality, and reporting standards.Ensure findings are accurate, reproducible, risk‑focused, and actionable for engineering and compliance teams.Support sales and pre‑sales effortsPartner with Sales on technical discovery calls, scoping discussions, and proposal input.Help prospects understand real‑world risk, testing depth, and value beyond checkbox compliance.Improve delivery operationsTrack and improve key delivery metrics (SLA adherence, retesting turnaround, utilization, client satisfaction).Identify bottlenecks and continuously refine delivery processes and tooling.Contribute to service evolutionProvide hands‑on input into the design and refinement of service lines (e.g., Red Teaming, AI/LLM testing, Secure Code Review, IoT).Help operationalize new offerings by defining scope, methodology, and delivery standards.Requirements6–8+ yearsin offensive security with strong hands‑on experience in penetration testing, red teaming, or related domains.2–3+ yearsin a technical leadership or management role within a consultancy or internal security team.Proven experience managing client engagements end‑to‑end in a professional services environment.Strong understanding of manual testing methodologies and frameworks (OWASP, ASVS, WSTG and NIST 800).Working knowledge of compliance and audit contexts (SOC 2, ISO 27001, PCI DSS) and how offensive testing maps to them.Ability to balance technical depth with delivery ownership and people management.Clear, confident communicator with engineers, executives, and non‑technical stakeholders.Bias toward action, accountability, and high‑quality outcomes.Nice to HaveExperience working with SaaS, FinTech, or HealthTech companies.Familiarity with PTaaS or portal‑driven delivery models.Offensive security certifications such asOSCP, OSEP, OSCE , or equivalent.#J-18808-Ljbffr
Offensive Security Lead
SOFTWARE SECURED
winnipeg, winnipeg
Published 28 days ago
Report job