The posting
Trading Technologies is seeking an organized, process-driven, and highly communicative Offensive Security Manager to lead our internal Offensive Security (Offsec) team. In this role, you will act as the crucial bridge between our security initiatives and our engineering teams. While this is primarily a management and operational role rather than a hands-on technical hacking position, you will need a solid foundational understanding of penetration testing methodologies and vulnerability lifecycles to be successful.
You will own the penetration testing schedule, manage critical vendor relationships, and drive our vulnerability management program to ensure that identified risks in TT’s platforms, systems, and applications are effectively communicated and remediated on time.
Key Responsibilities
- Team Leadership: Manage, mentor, and support a small, dedicated team of internal penetration testers and offensive security professionals whose core mission is to proactively identify vulnerabilities across TT’s environment.
- Schedule & Engagement Management: Own and orchestrate the comprehensive penetration testing schedule, seamlessly coordinating engagements for both our internal testers and third-party vendors to ensure continuous coverage.
- Vendor Management: Manage relationships with external third-party penetration testing vendors. This includes scoping engagements, managing budgets, reviewing proposals, and ensuring the quality and timely delivery of external reports.
- Engineering Liaison: Serve as the primary point of contact and relationship owner between the Offensive Security team and TT's Engineering and Product teams. Foster a collaborative culture of "security as a partner."
- Vulnerability Management: Play a leading role in the vulnerability management lifecycle. Work directly with engineering to triage findings, establish remediation plans, and ensure vulnerabilities are patched within established Service Level Agreements (SLAs) and deadlines.
- Metrics & Reporting: Track, measure, and report on key performance indicators (KPIs) related to penetration testing coverage, vulnerability identification rates, and remediation timelines to executive leadership.
- Process Improvement: Continuously refine and streamline offensive security workflows, reporting mechanisms, and cross-departmental engagement models to make security testing smoother and more efficient.
Skills, Knowledge and Expertise
Essential Qualifications:
- Cybersecurity Workflow Knowledge: Deep understanding of penetration testing workflows, methodologies, and engagement lifecycles (e.g., scoping, execution, reporting, remediation tracking).
- Leadership & Management: Proven experience managing teams, projects, or programs, preferably within an Information Security or Technology department.
- Vendor Management Experience: Previous experience selecting, onboarding, and managing external security testing vendors or consultancies.
- Exceptional Communication: Strong interpersonal skills with the ability to translate security risks into actionable engineering tasks. You must be able to negotiate deadlines, handle pushback, and drive consensus across cross-functional teams.
- Organizational Skills: Excellent project management skills, with the ability to juggle multiple ongoing security assessments, remediation trackers, and vendor timelines simultaneously.
- Preferred Qualifications (Beneficial but not strictly required):
Preferred Qualifications:
- Vulnerability Awareness: A basic technical awareness and understanding of common vulnerabilities and attack vectors (e.g., OWASP Top 10, CWEs) to facilitate informed conversations with both hackers and developers.
- Familiarity with Agile/DevOps: Understanding of modern software development lifecycles (SDLC) and how to integrate security testing into fast-paced engineering environments.
- Industry Certifications: Relevant management or security certifications (e.g., CISM, PMP, Security+, CISSP) are a plus.
- FinTech Experience: Previous experience working in the financial technology or trading industry.
Benefits
We offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance.
- Health & Financial Security:Pension contributions
- Time Off & Flexibility:Enjoy the best of both worlds: the energy and collaboration of in-person work, combined with the convenience and focus of remote days. This is a hybrid position requiring three days of in-office collaboration per week, with the flexibility to work remotely for the remaining two days. Our hybrid model is designed to balance individual flexibility with the benefits of in-person collaboration, enhanced team cohesion, spontaneous innovation, hands-on mentorship opportunities and strengthens our company culture. 25 days of Paid Time Off (PTO) per year, with the option to roll over unused days. One dedicated day per year for volunteering. Two professional development days per year to allow uninterrupted professional development. An additional PTO day added during milestone anniversary years. Generous parental leave for all parents (including adoptive parents).
- Work-Life Support & Resources:Budget for tech accessories, including monitors, headphones, keyboards, and other office equipment. Milestone anniversary bonuses.
- Wellness & Lifestyle Perks:Subsidy contributions toward gym memberships and health/wellness initiatives (including discounted healthcare premiums, healthy meal delivery programs, or smoking cessation support).
- Our Culture:
- Forward-thinking, culture-based organization with collaborative teams that promote diversity and inclusion.
Trading Technologies (www.tradingtechnologies.com) is a global capital markets platform services company providing market-leading technology for the end-to-end trading operations of Tier 1 banks, brokerages, money managers, hedge funds, proprietary traders, Commodity Trading Advisors (CTAs), commercial hedgers, and risk managers. With its roots in listed derivatives, the Software-as-a-Service (SaaS) company delivers “multi-X” solutions, with “X” representing asset classes, functions, workflows, and geographies. This multi-X approach features trade execution services across futures and options, fixed income, foreign exchange (FX), and cryptocurrencies, augmented by solutions for data and analytics, including transaction cost analysis (TCA); quantitative trading; compliance and trade surveillance; clearing and post-trade allocation; and infrastructure services. The award-winning TT platform ecosystem also helps exchanges deliver innovative solutions to their market participants and technology companies to distribute their complementary offerings to Trading Technologies’ clients.
Trading Technologies is backed by leading global investment firms Thoma Bravo, one of the world’s largest and most experienced software investors, and 7Ridge, a global growth equity firm focused on technology-enabled businesses. This investment supports Trading Technologies’ continued focus on product innovation, platform scalability, and long-term growth for customers and partners worldwide.
Trading Technologies (TT) is an equal-opportunity employer. Equal employment has been, and continues to be, a required practice at the Company. Trading Technologies’ practice of equal employment opportunity is to recruit, hire, train, promote, and base all employment decisions on ability rather than race, color, religion, national origin, sex/gender orientation, age, disability, sexual orientation, genetic information, parental status, veteran, or any other protected status. Additionally, TT participates in the E-Verify Program for US offices.
