Senior Offensive Security Manager - TJ / 1911419

Our client, MCB, is seeking a Senior Offensive Security Manager based in Lahore. This role requires staying current with the latest offensive security tools, techniques, and threat trends to enhance testing methodologies and effectively address evolving cyber threats. The Senior Manager will oversee the review and validation of technical VAPT reports prepared by internal security engineering teams and third-party vendors, ensuring their accuracy and providing actionable recommendations for vulnerability remediation. Additionally, the role involves generating periodic management reports that highlight vulnerability status, remediation progress, and emerging risks to support informed decision-making and efficient resource allocation. Mentoring and developing the offensive security team to maintain technical proficiency and foster professional growth is also a key aspect of this position.

Key Responsibilities

- Lead the planning, execution, and management of offensive security initiatives, including Vulnerability Assessment and Penetration Testing (VAPT), Red Teaming, and Source Code Review, ensuring alignment with global security standards and regulatory requirements.
- Identify and assess security vulnerabilities based on impact and exploitability, recommending prioritized remediation actions to effectively reduce risk exposure.
- Document and communicate security findings through detailed reports tailored for both technical and non-technical stakeholders to facilitate understanding and prompt remediation.
- Collaborate closely with IT and business stakeholders to ensure comprehensive tracking and compliance of vulnerability remediation activities.
- Review and validate the technical accuracy and completeness of VAPT reports generated by internal teams and external vendors, ensuring actionable recommendations are provided.
- Continuously monitor and incorporate emerging offensive security tools, techniques, and trends to refine assessment methodologies and maintain the effectiveness of security testing.
- Produce periodic management reports summarizing vulnerabilities, remediation statuses, and risk trends to enable informed decision-making and strategic resource allocation.
- Manage and mentor a team of three offensive security professionals, providing technical guidance, fostering skills development, and ensuring high-quality security assessments.
- Drive the implementation of effective controls and compensatory measures to mitigate identified risks, ensuring alignment with organizational security policies and compliance mandates.
- Promote a proactive security culture by educating teams on offensive security best practices and encouraging innovation in security testing strategies.
- Coordinate with regulatory and internal audit teams to provide evidence of security program effectiveness and compliance.
- Optimize resource allocation and project prioritization to maximize impact while maintaining operational efficiency within the offensive security function.

Required Qualifications

- Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field.
- Proven experience in offensive security, including VAPT, Red Teaming, and source code review.
- Strong understanding of global security standards and regulatory requirements related to offensive security.
- Demonstrated ability to review and validate technical security reports and provide actionable remediation recommendations.
- Experience managing and mentoring technical teams.

Preferred Qualifications

- Certifications such as PNPT (Practical Network Penetration Tester), eWPTX (eLearnSecurity Web Application Penetration Tester Expert), eMAPT (eLearnSecurity Mobile Application Penetration Tester), or CRTP (Certified Red Team Professional) are highly desirable.

This position offers the opportunity to lead offensive security efforts within a prominent financial institution, contributing to the protection of critical assets and fostering a culture of security excellence. The role demands a proactive mindset, strong leadership skills, and the ability to stay ahead of emerging cyber threats through continuous learning and innovation.