Manager, Offensive Security

About the role

The Global Cyber Defense team at Pfizer protects digital assets across on‑premises, cloud and hybrid environments. As the Manager, Offensive Security you will lead penetration testing, red‑team, purple‑team and adversary‑simulation activities, turning findings into measurable risk reduction.

Key responsibilities

• Lead day‑to‑day offensive security operations, including penetration tests, red‑team engagements and adversary simulations.
• Guide and mentor a team of offensive security engineers, providing technical direction and prioritisation.
• Plan, scope and deliver risk‑based offensive assessments aligned with business priorities.
• Document, validate and communicate findings to detection, remediation, engineering and risk teams.
• Partner with Threat Detection, Incident Response, Vulnerability Management and Engineering to translate findings into actionable improvements.
• Continuously improve offensive tools, methodologies and processes to increase coverage and realism.

Required profile

• Bachelor’s degree in Information Security, Computer Science, Engineering or related field, or equivalent experience.
• Minimum 4 years of experience in cybersecurity with a focus on offensive security, penetration testing or red‑team work.
• Proven ability to document and communicate technical findings to both technical and non‑technical audiences.
• Experience operating in highly regulated environments, making risk‑based decisions.

Required skills

• MITRE ATT&CK‑aligned red‑team and adversary‑emulation methodologies.
• Application, cloud, network and identity penetration testing.
• Social engineering and phishing simulation techniques.
• Offensive security tooling and frameworks (e.g., Metasploit, Cobalt Strike).
• Cloud platforms – AWS, Azure, GCP.
• SIEM and SOAR integration for detection engineering.
• Threat intelligence workflow familiarity.
• Professional certifications such as OSCP, OSEP, CRTO, CISSP, GIAC.