Director, Offensive Security
- Toronto, ON, Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Apply by
- Experience
- 10+ years of Information Security experience, including 5+ years in Offensive Security and 3+ years in Development or Engineering.
- Posting language
- English
- Posted
Original job description
- Innovate with Purpose: Build impactful solutions for customers worldwide.
- Join Excellence: Work in a diverse, collaborative, and innovative team.
- Shape the Future: Lead in redefining revenue optimization.
- Grow Together: Unlock your potential in a supportive environment.
About The Role
We're looking for a hands-on Director of Offensive Security to lead and evolve our offensive security program across applications, cloud environments, enterprise systems, and AI-enabled products.
This role combines technical expertise, strategic leadership, and cross-functional partnership to help identify, prioritize, and reduce security risk at scale. You'll lead offensive security initiatives including penetration testing, red teaming, AI security validation, vulnerability management, and bug bounty programs while partnering closely with Engineering, Product, Security, Compliance, and Legal teams.
What You'll Do
Lead the Offensive Security Program
- Define and execute the offensive security strategy and roadmap.
- Lead internal and external teams across penetration testing, red teaming, AI security testing, and vulnerability research.
- Establish standards, reporting, and metrics that drive measurable risk reduction.
- Oversee web, API, mobile, cloud, and AI-enabled security testing.
- Lead red team operations, adversary simulations, and purple team exercises.
- Manage external penetration testing engagements and testing vendors.
- Mature attack surface management and continuous security validation programs.
- Design and execute AI red teaming activities for LLM-enabled products and agentic workflows.
- Partner with AI and engineering teams to integrate security throughout the AI development lifecycle.
- Build scalable approaches for AI security testing, validation, and risk assessment.
- Drive vulnerability triage, prioritization, remediation, and retesting.
- Partner with engineering teams to implement risk-based remediation practices.
- Mature bug bounty and vulnerability disclosure programs.
- Partner with Engineering, Product, Security Operations, Compliance, and Legal teams.
- Communicate security risks, trends, and recommendations to senior leadership.
- Help shape the future of AI-enabled offensive security across the organization.
- 10+ years of Information Security experience, including 5+ years in Offensive Security and 3+ years in Development or Engineering.
- Experience leading offensive security programs in SaaS and cloud environments.
- Hands-on expertise in penetration testing, red teaming, vulnerability management, and security testing of AI-enabled products.
- Strong understanding of application security, cloud security, attack surface management, and secure development practices.
- Experience working with modern cloud environments, APIs, web applications, containers, and AI/LLM technologies.
- Ability to translate technical findings into business risk and influence stakeholders at all levels.
- Relevant certifications such as OSCP, OSWE, GXPN, GPEN, CISSP, CCSP, or cloud security certifications are considered an asset.
First 90 Days
- Assess the current offensive security landscape and identify key opportunities for improvement.
- Build relationships across engineering, security, and business teams.
- Establish priorities and define a roadmap for continuous security validation.
- Scale AI-enabled offensive security capabilities.
- Improve vulnerability management effectiveness and remediation outcomes.
- Deliver measurable reductions in organizational security risk.
- Scale autonomous vulnerability management across critical assets and environments.
- Mature AI-enabled red team capabilities and continuous threat-informed security validation.
- Drive measurable reductions in organizational risk through AI-enabled offensive security capabilities.
This posting is for a new vacancy.
This hiring process utilizes artificial intelligence tools to assist in candidate screening and assessment. Our AI tools are designed to complement - not replace - human decision-making.
Overview Of Benefits
- Health & Wellness - Comprehensive medical, dental, and vision coverage tailored to your local needs
- Time Off - PTO and public holidays to rest, recharge, and do what matters most
- Volunteer Days - Dedicated time to give back and support the communities that matter to you
- Ignite Days - Dedicated learning days to support continuous growth, skill development, and professional learning
- Financial - Compensation that reflects your market and your value
- Retirement - Retirement plans designed to help you build long-term financial security
- Tuition Assistance - Invest in your growth with support for continuing education and professional development
- Flexibility - Work where you thrive, with remote and hybrid options available across most regions
Varicent is also committed to compliance with all fair employment practices regarding citizenship and immigration status. By applying for a position at Varicent and/or by using this portal, you declare and confirm that you have read and agree to our Job Applicant Privacy Notice and that the information provided by you as part of your application is true and complete and includes no misrepresentation or material omission of fact
More about this job
Responsibilities
Lead the offensive security strategy and teams across penetration testing, red teaming, AI security validation, vulnerability research, and continuous security testing. Partner with engineering, product, security, compliance, and legal teams to prioritize remediation, mature security programs, and communicate risk to senior leadership.
Requirements
Requires 10+ years of information security experience, including 5+ years in offensive security and 3+ years in development or engineering, with experience leading programs in SaaS and cloud environments. Candidates should have hands-on expertise in penetration testing, red teaming, vulnerability management, AI-enabled product security, and modern cloud, API, web, container, and LLM technologies; relevant security certifications are an asset.
Skills
- Offensive Security Program Leadership
- Penetration Testing
- Red Teaming
- AI Security Testing
- Vulnerability Management
- Application Security
- Cloud Security
- Attack Surface Management
- Security Testing
- Adversary Simulation
- Purple Team Exercises
- Bug Bounty Programs
- Secure Development Practices
- Risk Assessment
- Stakeholder Communication
- SaaS Security
Benefits
- Medical Coverage
- Dental Coverage
- Vision Coverage
- Paid Time Off
- Public Holidays
- Volunteer Days
- Learning Days
- Retirement Plans
- Tuition Assistance
- Remote and Hybrid Work Options
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
- Software
- Management & Leadership
- Engineering
Keywords
- SaaS
- Sales Performance Management
- Offensive Security
- Penetration Testing
- Red Teaming
- AI Security
- LLM
- Agentic Workflows
- Vulnerability Management
- Vulnerability Research
- Bug Bounty
- Vulnerability Disclosure
- Attack Surface Management
- Adversary Simulation
- Purple Team
- Application Security
- Cloud Security
- APIs
- Web Applications
- Mobile Security
- Containers
- Secure Development
- Risk Assessment
- OSCP
- OSWE
- GXPN
- GPEN
- CISSP
- CCSP