Offensive Security Manager

Jobtailor; Connecticut; On-site; USD 110,000 - 170,000; Full time

Job summary

Crowe is seeking a seasoned cybersecurity professional in the United States to lead or support comprehensive penetration testing programs. The role encompasses network, web, and wireless testing, as well as red team activities and social engineering, with a focus on practical remediation guidance.

Candidates should bring 5+ years of offensive security experience, relevant certifications, and strong ability to translate technical findings to executive stakeholders.

Qualifications

• Bachelor's degree in information systems, Computer Science, Cybersecurity, Engineering, or related field.

Responsibilities

• Lead or support internal and external network penetration testing engagements.
• Perform web application penetration testing.
• Perform wireless penetration testing.
• Conduct social engineering, including phishing, telephone, and onsite activities.
• Perform red teaming/threat emulation and purple teaming.
• Evaluate and test IT controls, application controls, security configurations, and interface/integration security.
• Provide practical vulnerability remediation recommendations.
• Present findings and recommendations to IT, Information Security, C-suite, and board-level stakeholders.

Skills

Network Penetration Testing

Web App Penetration Testing

Wireless Penetration Testing

Social Engineering

Red Team/Threat Emulation

Purple Teaming

Vulnerability Remediation

IT Controls Evaluation

Scripting

Project Management

Mentoring

Effective Communication

Education

Bachelor's degree in information systems, Computer Science, Cybersecurity, Engineering, or related field

Tools

Metasploit

Burp Suite

BloodHound

Nmap

Job description

Lead or support internal and external network penetration testing engagements
Perform web application penetration testing
Perform wireless penetration testing
Conduct social engineering, including phishing, telephone, and onsite activities
Perform red teaming/threat emulation and purple teaming
Evaluate and test IT controls, application controls, security configurations, and interface/integration security
Provide practical vulnerability remediation recommendations
Conduct cybersecurity assessments against NIST CSF, NIST 800.53, CIS, and integrated control frameworks
Present findings and recommendations to IT, Information Security, C-suite, and board-level stakeholders
Lead or support client program execution, including control implementation, metrics/reporting, issue remediation, and continuous improvement
Mentor and supervise junior consultants
Contribute to team development and internal knowledge-sharing
Participate in practice development, service-line and methodology innovation, and thought leadership

Requirements

• Bachelor's degree in information systems, Computer Science, Cybersecurity, Engineering, or related field
• Certification such as CISSP, OSCP, OSCE, or similar
• 5+ years of experience in cybersecurity, offensive security, or related consulting or industry roles
• Deep working knowledge of Windows, Linux/Unix, and databases such as SQL and Oracle
• Working knowledge of networks and the seven-layer OSI model
• Proficiency with Metasploit, Burp Suite, BloodHound, Nmap, and similar offensive security tools and frameworks
• Detection engineering or blue team operations knowledge, including evasion techniques
• Strong scripting or programming skills
• Experience with or curiosity about AI and automation tools in cybersecurity, including secure implementation practices and risk assessments
• Strong project management, critical thinking, and interpersonal skills
• Excellent communication and technical writing skills
• Ability to tailor messages to technical and executive audiences
• Ability to uphold Crowe's values and act ethically and with integrity
• Must verify identity and eligibility to work in the United States
• Crowe is not sponsoring work authorization

Core Competencies

Demonstrates expertise in network penetration testing, web application security, and vulnerability remediation, with a strong foundation in cybersecurity frameworks such as NIST and CIS. Capable of leading teams, mentoring junior consultants, and effectively communicating findings to diverse stakeholders.

Highest-signal resume keywords

• Network Penetration Testing
• Web Application Penetration Testing
• CISSP Certification
• Metasploit Proficiency
• Project Management Skills

ATS Optimization Keywords

Hard Skills

• Cybersecurity Assessments
• Vulnerability Remediation
• Scripting Skills
• Detection Engineering
• Offensive Security
• Security Configurations
• Control Implementation
• Risk Assessments
• Social Engineering
• Threat Emulation

Soft Skills

• Critical Thinking
• Interpersonal Skills
• Technical Writing
• Communication Skills
• Mentoring

Certifications & Qualifications

• CISSP
• OSCP
• OSCE

Industry Keywords

• NIST CSF
• NIST 800.53
• CIS
• Seven-Layer OSI Model
• Windows
• Linux/Unix
• SQL
• Oracle

Tools & Technologies

• Burp Suite
• Nmap
• BloodHound
• Metasploit
• AI Tools in Cybersecurity