Twilio

Build the future of communications.

Senior Manager – Offensive Security

Full TimeRemoteTeam 5,001-10,000H1B SponsorCompany SiteLinkedIn

Location

California + 5 moreAll locations: California, Connecticut, New Jersey, New York, Pennsylvania, Washington

Posted

2 days ago

Salary

$188.2K - $276.7K / year

Bachelor Degree10 yrs expEnglishAWSAzureCloudCyber SecurityGoogle Cloud PlatformKubernetesPythonSDLCGo

Job Description

• Develop and execute a multi-year roadmap for offensive security, including red teaming, penetration testing, bug bounty, and vulnerability research. • Design and lead full-scope red team engagements that simulate Advanced Persistent Threats (APTs) to test detection and response capabilities. • Oversee the end-to-end lifecycle of offensive engagements, from initial scoping and Rules of Engagement (RoE) to final reporting. • Facilitate collaborative "Purple Team" exercises with Detection and Response (TDR) to improve detection logic and incident response playbooks. • Translate complex technical findings into actionable business risk assessments for C-suite executives and Board members. • Recruit, retain, and develop a high-performing team of offensive security engineers, providing technical guidance and career coaching. • Partner with vulnerability management, product, and engineering to ensure that findings from offensive tests are prioritized and remediated effectively. • Oversee the development of custom scripts, payloads, and C2 (Command and Control) frameworks to enhance the team’s stealth and efficiency. • Conduct specialized threat modeling for AI-native applications, focusing on the OWASP Top 10 for LLMs and MITRE ATLAS (Adversarial Threat Landscape for AI Systems). • Design and execute manual and automated Prompt Injection & Jailbreaking to bypass model guardrails, system prompts, and safety filters. • Ensure all offensive activities align with legal, ethical, and regulatory standards (e.g., GDPR, SOC2, PCI-DSS). • Incorporate current Cyber Threat Intelligence (CTI) into attack scenarios to ensure they reflect the latest real-world TTPs (Tactics, Techniques, and Procedures). • Manage relationships and quality control for external security consultancy firms performing third-party penetration tests. • Encourage and lead research into emerging technologies to identify future attack vectors. • Work closely with Product and Engineering teams to bake security into the Software Development Life Cycle (SDLC) through testing and assessments.

Job Requirements

  • Minimum of 10+ years in cybersecurity, with at least 5 years specifically in offensive security roles and 2+ years in a leadership or management capacity.
  • Deep knowledge of security frameworks like the MITRE ATT&CK framework, Cyber Kill Chain, and advanced exploitation techniques (e.g., AD, cloud, and applications attacks).
  • Possession of advanced industry certifications such as OSCP, OSEP, OSWE, GXPN or similar
  • Proficient in attacking and defending diverse environments including AWS/Azure/GCP, Kubernetes, and hybrid-cloud architectures.
  • Proven experience in automating red teaming for GenAI and proficiency in using AI offensive tools like PyRIT, Prompfoo, Xbow or Counterfit to build and stage AI powered attacks
  • Advanced experience with red team and penetration testing tools such as Cobalt Strike, Burp Suite Pro, Metasploit, BloodHound, and Sliver.
  • Strong ability to code or script in Python, PowerShell, Go, or C++ for exploit development and task automation.
  • Proven ability to connect individual vulnerabilities into complex attack chains that demonstrate significant business impact.
  • A flawless record of ethical conduct and the ability to handle extremely sensitive access and information with total discretion.

Benefits

  • Competitive pay
  • Generous time off
  • Ample parental and wellness leave
  • Healthcare
  • A retirement savings program
  • This role may be eligible to participate in Twilio’s equity plan and corporate bonus plan.
  • All roles are generally eligible for the following benefits: health care insurance, 401(k) retirement account, paid sick time, paid personal time off, paid parental leave.

Related Categories

Related Job Pages