Offensive Security Engagement Coordinator

The Offensive Security Engagement Coordinator is a senior individual contributor role acting as the program and engagement manager for our Offensive Security & Fraud Testing (OSFT) team. This professional ensures seamless coordination and delivery of offensive security operations – including red team engagements, penetration tests, GenAI-augmented offensive security projects, Purple Team exercises, and fraud simulations. The role’s mission is to enable the offensive security team to run more effectively at scale by managing logistics, stakeholder communications, and risk tracking, thereby freeing technical operators to focus on execution.

This role reports to the Senior Manager, Offensive Security & Fraud Testing and requires deep understanding of offensive security processes, excellent program management skills, and the ability to coordinate across technical and business stakeholders. Success in this role is measured by predictable engagement execution, timely remediation of identified risks, and high stakeholder satisfaction.

• Engagement Planning & Scheduling: Own end-to-end planning and scheduling of multiple concurrent engagements (red team operations, pentests, purple team exercises, etc.) based on priority and risk. Manage intake of new engagement requests, prioritizing and sequencing operations in alignment with enterprise risk priorities. Assign appropriate offensive security operators to each project based on skills and availability, ensuring balanced workloads and on‑time delivery.
• Coordination & Execution Support: Serve as the central coordination point for offensive engagements. Facilitate all key engagement meetings – from initial scoping/kickoff to peer reviews and wrap‑up sessions. Keep engagements on track by monitoring timelines, deliverables, and dependencies, proactively resolving scheduling or logistical issues so that technical teams can maintain focus. Provide regular status updates to stakeholders (security leadership, asset owners, Risk Advisors) on engagement progress and roadblocks.
• Stakeholder Communication & Readouts: Act as the primary liaison between the offensive team and stakeholders (security leadership, risk management, IT owners, fraud teams). Coordinate stakeholder readouts and debriefs – scheduling and facilitating post‑operation briefings and executive summaries to discuss findings, business impacts, and recommended actions. Ensure that stakeholders, including risk and technology partners, are informed and engaged throughout engagements.
• Findings Management & Risk Tracking: Manage the output of offensive security operations by overseeing the identification, documentation, and closure of findings. Record and track all discovered vulnerabilities and risks in the enterprise risk register or issue tracking system, with accurate severity ratings and ownership assignments. Coordinate remediation and retesting efforts – work with system owners and risk teams to ensure timely remediation of findings, and schedule re‑tests to validate that fixes are effective.
  
  Facilitate formal risk acceptance processes for any residual risks that cannot be fully mitigated, ensuring that all findings are resolved or appropriately dispositioned.
• Process Governance & Continuous Improvement: Maintain and improve engagement processes to ensure consistency and quality across operations. Oversee weekly team huddles and quarterly backlog reviews to track progress, adjust priorities, and groom upcoming engagements. Ensure consistent use of project tracking tools (e.g., Jira) and templates for engagement planning and reporting. Enforce documentation standards for deliverables, including peer‑reviewed reports, and capture attack tactics & techniques (TTPs) in the team’s knowledge repository for metrics and future reference.
  
  Identify opportunities to streamline workflows (e.g., automation of recurring tasks, improved reporting dashboards) and work with the team to implement improvements.
• Cross‑Team Collaboration & Alignment: Bridge the gap between offense, defense, and risk management. Liaise with security operations, fraud, and risk management colleagues to align offensive…