Manager of Offensive Security, Ivanti

• You are a strong advocate of security by design and secure software development lifecycle
• 10+ years of hands-on offensive security experience including penetration testing, vulnerability assessment, and ethical hacking
• Experience in leading a red team against a large, complex target strongly preferred
• Background in security research or academic security work
• A solid understanding of common technology such as Active Directory, O365, cloud platforms (AWS and Azure), Windows, OS X and Linux operating systems, mobile operating systems, networking etc
• A solid understanding of application security standards (OWASP, ASVS, etc.) is highly desired
• Experience working in collaborative, cross-functional environments
• Leadership experience with ability to influence without direct authority Strong verbal and written communication skills for communicating with both engineering and business stakeholders

Desirable

• As an Offensive Security Manager, you will be a driving force into moving Ivanti to a risk-based security organization
• Your work will have a direct impact on reducing the IT security risks in Ivanti products and services
• With a solid technical background and knowledge in IT security and software development, you’ll be the link between the different security and engineering teams and their stakeholders
• You will be leading and assisting multiple teams of four penetration testers in performing targeted internal penetration tests based on the risks you identified
• Design, implement, and manage comprehensive offensive security programs including penetration testing, red team exercises, and security assessments
• Lead internal and external penetration testing initiatives across web applications, mobile applications, network infrastructure, and cloud environments
• Develop and maintain offensive security methodologies, frameworks, and testing procedures
• Conduct advanced threat-modelling and attack simulation exercises
• Collaborate with development teams to integrate security testing into SDLC processes
• Proven track record of building and scaling responsible disclosure programs
• Experience working with bug bounty platforms (HackerOne, Bugcrowd, etc.)
• Strong project management skills with ability to coordinate multiple concurrent initiatives
• Experience developing policies, procedures, and operational frameworks

• This job posting will remain active until a qualified candidate is identified