Offensive Security Manager Job in Bengaluru at BT Group

BT Group is hiring for the role of Offensive Security Manager!

Responsibilities of the Candidate:

• Leads teams in the implementation, development, and maintenance of security testing strategies, roadmaps, policies, processes, technologies, and controls
• Manages application security, vulnerability management, and threat research teams responsible for red teaming, penetration testing, code scanning, and vulnerability management across the BT Group
• Champions and continuously develops knowledge on emerging trends and advancements in security testing, sharing insights with the team
• Coaches and manages team members to build capabilities, improve performance, and support upskilling, development, and recruitment efforts
• Implements process improvements within the area of security testing to enhance efficiency and effectiveness
• Leads the creation and refinement of policies and procedures for red teaming, penetration testing, code scanning, and vulnerability management
• Oversees the validation of security controls and incident response readiness through offensive security operations
• Contributes to existing security testing services and capabilities by performing hands-on technical testing focused on detection and response
• Customizes tooling to bypass antivirus (AV), endpoint detection and response (EDR), and other defensive technologies
• Enhances and evolves security and penetration testing techniques across a broad range of projects
• Plans, coordinates, authorizes, and executes intelligence-informed, scenario-based red and purple team operations, both short- and long-term
• Communicates findings and strategic insights to various stakeholders, including technical teams, executive leadership, and legal counsel
• Delivers comprehensive penetration test scopes aligned with certification and compliance requirements
• Promotes integration between application security testing, infrastructure vulnerability assessments, threat assessments, and penetration testing to strengthen detection and prevention capabilities
• Leads the execution of threat, vulnerability, and risk analyses, offers mitigation and remediation guidance, and articulates both inherent and residual risks clearly

Requirements: