Senior Manager Offensive Security

The Senior Manager, Offensive Security leads Asurion's offensive security testing function. Reporting to the Director of Application & Offensive Security, this leader is accountable for the intake, prioritization, execution, and quality of penetration testing across web and mobile applications, APIs, cloud environments, internal and external infrastructure, and supporting business services. This position balances hands‑on technical leadership with people management, ensuring engagements are scoped effectively, delivered on schedule, and reported with findings that drive measurable risk reduction.

The Senior Manager translates technical results into clear business risk for engineering, product, and security leadership, and partners closely with development, cloud, and infrastructure teams to ensure findings are understood and remediated.

• Penetration Testing Operations and Queue Management:
  Own the end‑to‑end penetration testing intake and delivery pipeline. Manage the testing queue, triage and prioritize incoming requests based on risk, business criticality, regulatory drivers, and release timelines, and balance workload across the team to meet commitments. Establish and maintain a repeatable engagement lifecycle covering scoping, rules of engagement, execution, reporting, retesting, and closure.
• Technical Delivery and Quality Assurance:
  Oversee the execution of application, API, mobile, cloud, network, and infrastructure penetration tests. Set standards for testing rigor, evidence collection, exploit validation, and finding reproducibility. Review deliverables for technical accuracy, clarity, and actionable remediation guidance, and personally lead or contribute to complex, high‑sensitivity engagements when needed.
• People Leadership and Team Development:
  Manage, coach, and grow a team of penetration testers and offensive security engineers. Set clear goals and performance expectations, provide regular feedback, support career development and technical skill growth, and cultivate a culture of curiosity, integrity, and continuous learning.
• Risk Reporting and Stakeholder Communicati Senior Manager, Offensive Securityon:
  Produce clear, decision‑oriented reporting on penetration testing outcomes, trends, systemic weaknesses, and remediation progress. Translate technical findings into business risk language for engineering leaders, product owners, and security leadership. Track findings to closure, support risk acceptance and exception decisions where appropriate, and contribute to consolidated security reporting and metrics that demonstrate the program's impact.
• Remediation Partnership and Secure Development Enablement:
  Partner with application development, Dev Ops, cloud, and infrastructure teams to ensure findings are understood, prioritized, and remediated. Provide guidance on root cause and durable fixes rather than one‑off patches, and feed recurring patterns back into secure SDLC practices, threat modeling, and developer education.
• Agentic and AI‑Enabled Testing (Emerging Focus):
  Explore, pilot, and progressively develop an agentic penetration testing capability. Evaluate AI‑assisted and autonomous offensive security tooling, define where automation can safely and effectively extend coverage, establish guardrails and validation processes for AI‑generated findings, and build a roadmap that matures this capability over time while preserving the judgment and depth of human testers. Stay current on the evolving offensive AI landscape and represent Asurion's forward‑looking approach to internal stakeholders.
• Program Governance and Continuous Improvement:
  Maintain testing standards, tooling, and documentation, and continuously improve throughput, coverage, and quality. Ensure the program supports audit, compliance, and regulatory requirements, and coordinate with vulnerability management, exposure management, and incident response functions to align offensive testing with the broader security program.

• Bachelor's degree in Information Security, Computer Science, Information Technology, Engineering, or a related field, or equivalent practical experience.
• 8+…