Lead the organization's offensive security strategy and vulnerability management
Ensure proactive identification, prioritization and mitigation of security risks across corporate environments, applications and infrastructure
Lead pentest (penetration testing), Red Team and security assessment teams
Define and execute the vulnerability management strategy (identification, analysis, prioritization and remediation)
Oversee scanning tools (e.g., Qualys, Nessus, Rapid7) and security platforms
Coordinate security testing for applications (SAST, DAST, SCA) and infrastructure
Work with development and operations teams to implement fixes
Establish processes and policies aligned with frameworks such as OWASP, NIST, ISO 27001
Prepare executive reports with risk analysis and indicators (KPIs/KRIs)
Lead Red Team / Purple Team initiatives
Ensure compliance with regulatory requirements and audits
Promote a security culture and provide internal training

Advanced knowledge of offensive security (web, mobile and infrastructure pentesting)
Vulnerability exploitation
Hardening and secure architecture
Experience with tools: Burp Suite, Metasploit, Nmap, Nessus, Qualys
Familiarity with Cloud Security (AWS, Azure, GCP)
DevSecOps and secure pipelines
Scripting languages (Python, Bash, etc.) are a plus
Experience managing technical security teams
Ability to communicate with technical and executive stakeholders
Project management and risk prioritization skills
Strategic vision and risk-based decision making
Degree in IT, Information Security or related fields
Certifications such as: CEH (Certified Ethical Hacker), OSCP, CISSP, CISM, CompTIA Security+

Technical Manager – Cybersecurity, Red Team / Purple Team

Key skills