Director- Offensive Security
$152,000–$220,000 year
Remote · United States or US
Job Summary
Lead an offensive security organization delivering web app penetration testing, Defense-in-Depth assessments, and Red Team operations. Define an automation-first, AI-enabled offensive security program with testing orchestration, attack simulation, and data-driven prioritization to scale across IT, cloud, product, OT, and AI/ML environments. Oversee end-to-end engagements, including intake, scope, scheduling, quality reviews, and executive communications; direct stealth and overt engagements with robust rules of engagement; manage vendor relationships and tooling (e.g., Nessus, AttackForge); partner with vulnerability management, product security, and engineering teams to ensure findings are actionable and re-tested; establish methodologies, standards, and KPIs to drive measurable risk reduction. Requires advanced education/experience in offensive security, proven leadership, and ability to mature security programs with repeatable playbooks and governance.
Required Qualifications
- Bachelor’s degree from an accredited university or college with a minimum of 8 years of professional experience OR an Associate’s degree with a minimum of 11 years of professional experience OR a High School Diploma with a minimum of 13 years of professional experience
- Minimum of 5 years of specific experience in offensive security, penetration testing, and/or Red Team operations
- Demonstrated people leadership experience leading and developing technical teams (including performance management and talent development)
- Demonstrated experience overseeing penetration testing services, including web application testing and broader multi-layer (Defense-in-Depth) assessments
- Demonstrated experience leading Red Team engagements, including safe execution, stakeholder alignment, and high-quality reporting
- Experience managing third-party vendors/consultants supporting security delivery
- Preferred qualifications include OT and/or embedded/on-product environments experience, automation, playbooks, governance, and metrics
- Experience owning or administering offensive security tooling and engagement management platforms (e.g., AttackForge, Nessus) including budget/contract accountability
- Relevant certifications (OSCP/OSWE/OSCE, GPEN/GXPN, GCIH, CISSP) or equivalent demonstrated expertise
Additional Requirements
- Role requires access to U.S. export-controlled information and status as a U.S. Person (U.S. citizen, permanent resident, asylee/refugee) as a condition of employment
- Employment contingent upon being legally authorized to work in the United States
- Relocation not provided (Relocation Assistance Provided: No)
Apply with one swipe on Sorce. We auto-fill applications and apply on your behalf — no cover letters, no 40-minute forms.
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.