Trading Technologies

High-performance trading software and data solutions

Offensive Security Manager

Offensive Security & TestingUpdated on Nov 13

Full-timePrague, CzechiaCZK1.8M - CZK2.6M /yrHybrid

About the Job

Requirements

Deep understanding of penetration testing workflows, methodologies, and engagement lifecycles, including scoping, execution, reporting, and remediation tracking.
Proven experience managing teams, projects, or programs, preferably within an Information Security or Technology department.
Previous experience selecting, onboarding, and managing external security testing vendors or consultancies.
Ability to translate security risks into actionable engineering tasks, negotiate deadlines, handle pushback, and drive consensus across cross-functional teams.
Project management skills and ability to manage multiple ongoing security assessments, remediation trackers, and vendor timelines simultaneously.

Responsibilities

Manage, mentor, and support an internal team of penetration testers and offensive security professionals who proactively identify vulnerabilities across the company environment.
Own and coordinate the penetration testing schedule, including engagements for internal testers and third-party vendors, to ensure continuous coverage.
Manage external penetration testing vendor relationships, including scoping engagements, managing budgets, reviewing proposals, and ensuring quality and timely delivery of reports.
Serve as the primary point of contact and relationship owner between the Offensive Security team and Engineering and Product teams, fostering security partnership.
Lead the vulnerability management lifecycle by working with engineering to triage findings, establish remediation plans, and ensure vulnerabilities are patched within established service level agreements and deadlines.
Track, measure, and report key performance indicators for penetration testing coverage, vulnerability identification rates, and remediation timelines to executive leadership.
Continuously refine and streamline offensive security workflows, reporting mechanisms, and cross-departmental engagement models.

Desired Qualifications

Basic technical awareness and understanding of common vulnerabilities and attack vectors, including OWASP Top 10 and CWEs.
Understanding of modern software development lifecycles and how to integrate security testing into fast-paced engineering environments.
Relevant management or security certifications such as CISM, PMP, Security+, or CISSP.
Previous experience working in the financial technology or trading industry.

Trading Technologies is seeking an organized, process-driven, and highly communicative Offensive Security Manager to lead our internal Offensive Security (Offsec) team. In this role, you will act as the crucial bridge between our security initiatives and our engineering teams. While this is primarily a management and operational role rather than a hands-on technical hacking position, you will need a solid foundational understanding of penetration testing methodologies and vulnerability lifecycles to be successful.

You will own the penetration testing schedule, manage critical vendor relationships, and drive our vulnerability management program to ensure that identified risks in TT’s platforms, systems, and applications are effectively communicated and remediated on time.

Team Leadership: Manage, mentor, and support a small, dedicated team of internal penetration testers and offensive security professionals whose core mission is to proactively identify vulnerabilities across TT’s environment.
Schedule & Engagement Management: Own and orchestrate the comprehensive penetration testing schedule, seamlessly coordinating engagements for both our internal testers and third-party vendors to ensure continuous coverage.
Vendor Management: Manage relationships with external third-party penetration testing vendors. This includes scoping engagements, managing budgets, reviewing proposals, and ensuring the quality and timely delivery of external reports.
Engineering Liaison: Serve as the primary point of contact and relationship owner between the Offensive Security team and TT's Engineering and Product teams. Foster a collaborative culture of "security as a partner."
Vulnerability Management: Play a leading role in the vulnerability management lifecycle. Work directly with engineering to triage findings, establish remediation plans, and ensure vulnerabilities are patched within established Service Level Agreements (SLAs) and deadlines.
Metrics & Reporting: Track, measure, and report on key performance indicators (KPIs) related to penetration testing coverage, vulnerability identification rates, and remediation timelines to executive leadership.
Process Improvement: Continuously refine and streamline offensive security workflows, reporting mechanisms, and cross-departmental engagement models to make security testing smoother and more efficient.

Essential Qualifications:

Cybersecurity Workflow Knowledge: Deep understanding of penetration testing workflows, methodologies, and engagement lifecycles (e.g., scoping, execution, reporting, remediation tracking).
Leadership & Management: Proven experience managing teams, projects, or programs, preferably within an Information Security or Technology department.
Vendor Management Experience: Previous experience selecting, onboarding, and managing external security testing vendors or consultancies.
Exceptional Communication: Strong interpersonal skills with the ability to translate security risks into actionable engineering tasks. You must be able to negotiate deadlines, handle pushback, and drive consensus across cross-functional teams.
Organizational Skills: Excellent project management skills, with the ability to juggle multiple ongoing security assessments, remediation trackers, and vendor timelines simultaneously.
Preferred Qualifications (Beneficial but not strictly required):

Preferred Qualifications:

Vulnerability Awareness: A basic technical awareness and understanding of common vulnerabilities and attack vectors (e.g., OWASP Top 10, CWEs) to facilitate informed conversations with both hackers and developers.
Familiarity with Agile/DevOps: Understanding of modern software development lifecycles (SDLC) and how to integrate security testing into fast-paced engineering environments.
Industry Certifications: Relevant management or security certifications (e.g., CISM, PMP, Security+, CISSP) are a plus.
FinTech Experience: Previous experience working in the financial technology or trading industry.

About the Company

Trading Technologies

High-performance trading software and data solutions

Trading Technologies provides professional trading software, infrastructure, and data services for capital markets, supporting futures, options, and cryptocurrency trading. Its platform is fast and reliable, offering charting, spreading, and algorithmic trading tools delivered through licensing or subscription, with optional hosting, network, and exchange connectivity services. The company differentiates itself with enterprise-grade, speed-focused infrastructure and a broad asset-class platform that complements the software with added data services. Its goal is to help professional traders and institutions trade more efficiently and stay compliant through high-performance tools and data capabilities.

Company size: 1,001-5,000
Company stage: Not listed
Total funding: Not listed
Headquarters: Chicago, IL
Founded: 1994

Recently Posted Jobs

Explore more opportunities at Trading Technologies

See more jobs