Offensive Security Manager

Offensive Security Manager

Think like an attacker, lead like a strategist. This is a rare chance to own and shape the offensive security function for a global logistics organisation, where your work protects the systems that keep freight moving across Australia and around the world.

You'll lead red teaming and penetration testing across a large, complex estate, from cloud and corporate IT to operational technology on the ground, and you'll have the influence to set how offensive security is done here.

About the opportunity

• Join a global logistics and supply chain organisation that keeps critical freight moving across Australia and internationally
• Large, complex environment spanning corporate IT, cloud, customer-facing platforms and operational technology across depots and distribution sites
• A newly shaped leadership role within the cyber security function, with real influence over how offensive security is run
• Your work directly protects operations that customers and communities rely on every day

The role

• Lead and grow the offensive security capability, covering penetration testing, red teaming and adversary simulation
• Own the annual testing program, prioritising effort against the organisation's biggest risks and most critical assets
• Manage internal testers and third-party specialists, setting scope, quality standards and rules of engagement
• Work alongside the defensive teams on purple team exercises to improve detection and response
• Translate technical findings into clear, risk-based reporting for technology and executive stakeholders, and drive remediation through to closure

What you'll bring

• Strong hands-on background in penetration testing and/or red teaming across infrastructure, cloud, web applications and Active Directory
• Experience leading a team or a testing function, including managing external providers
• Solid understanding of attacker tradecraft and frameworks such as MITRE ATT&CK
• The ability to explain technical risk to non-technical audiences and influence senior stakeholders
• Australian working rights

Highly regarded: industry certifications such as OSCP, OSEP, CRTO or CREST, and exposure to OT or industrial environments.

Interested?

Apply now, or reach out to Emily at PRA for a confidential chat: Sign in to view email