Offensive Security Manager (Red Team)

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field, or an equivalent combination of education and experience.
• 8+ years of progressive cybersecurity experience, including at least 5 years in offensive security, Red Team operations, adversary emulation, or penetration testing within a mid to large enterprise environment.
• 3+ years of people leadership experience managing senior security engineers, Red Team practitioners, or offensive security teams.
• Demonstrated experience leading complex Red Team and Purple Team engagements, including intelligence driven campaigns and assumed breach operations.
• Strong understanding of attacker methodologies, enterprise attack paths, and modern offensive security frameworks.
• Experience assessing AI security risks and conducting security testing of AI enabled products, services, applications, or workflows.
• Proven success translating offensive security findings into measurable improvements in detection, response, and overall security posture.
• Experience operating within highly regulated or risk sensitive environments.
• Strong communication, presentation, and stakeholder management skills, including the ability to influence senior leaders and drive cross functional collaboration.

• Experience developing custom offensive security tools, automation, or adversary simulation capabilities.
• Familiarity with cloud security testing across AWS, Azure, and Google Cloud environments.
• Experience testing identity platforms, enterprise SaaS applications, and modern application architectures.
• Knowledge of threat intelligence integration and threat informed defense methodologies.

One or more of the following certifications are preferred:

• GXPN, GIAC Exploit Researcher and Advanced Penetration Tester
• AI security, AI red teaming, or equivalent emerging cybersecurity certifications

• Improved detection and response effectiveness resulting from Red Team and Purple Team engagements.
• Demonstrated maturity and effectiveness of the enterprise Red Team program.
• Strong partnership with cybersecurity, technology, and business stakeholders.
• Measurable reduction in critical security gaps through threat informed testing and validation efforts.

The salary range for this position is from $170,000 to $230,000 per year, plus an opportunity to earn an annual discretionary bonus.

Actual pay is based on various factors including but not limited to, the budget, work location, relevant skills, and experience.

We offer competitive pay, comprehensive medical, dental, and vision coverage, retirement benefits, maternity and paternity leave, flexible work arrangements, education reimbursement, wellness programs, and more.

Citizens’ paid time off policy exceeds the mandatory paid sick or paid time away policies of local and state jurisdictions in the United States.

For an overview of our benefits, visit our Careers site: https://jobs.citizensbank.com/benefits.

#LI-Citizens1