Senior Manager, Attack Surface Reduction

Required Development & Automation Skills

• Security Tooling Development: Proficiency in Python or Go (Golang) to build custom scanners, exploit wrappers, and automation scripts.
• Infrastructure as Code (IaC): Solid understanding of Terraform or Ansible to rapidly spin up (and tear down) complex "range" environments for Red Team simulations and Ransomware Resiliency testing.
• Dev-Sec-Ops & CI/CD Integration: Deep knowledge of how to integrate SAST/DAST/SCA tools directly into GitLab, GitHub Actions, or Jenkins pipelines without breaking the developer workflow.
• API Mastery: Advanced ability to interact with, test, and develop against RESTful and Graph-QL APIs. This includes writing custom scripts to automate mass API vulnerability discovery.
• Cloud-Native Development: Familiarity with Serverless (AWS Lambda/Azure Functions) and Containerization (Docker/Kubernetes) to identify and exploit misconfigurations in modern microservices architectures.
• Exploit Development Basics: Understanding of low-level languages like C/C++ or Rust to oversee the team when they are performing deep-dive binary analysis or bypass research.
• Data Engineering for Security: Ability to work with SQL/NoSQL and ELK stacks (Elasticsearch, Logstash, Kibana) to aggregate and analyse the massive amounts of data generated during Attack Surface Discovery.

Soft Skills & Leadership

• Candor & Clarity: The ability to give direct, constructive feedback to a highly technical team while maintaining high morale.
• Strategic Vision: Moving beyond "finding bugs" to helping clients build long-term Resilience Frameworks .
• · Technical Depth: You must be able to "speak the language" of highly technical researchers to earn their respect and provide valid guidance.
• · Pressure Management: Thriving in the fast-paced, 24/7 nature of an MSSP.

Why Join Us?