Offensive Security Manager

Think like an attacker, lead like a strategist. This is a rare chance to own and shape the offensive security function for a global logistics organisation, where your work protects the systems that keep freight moving across Australia and around the world.

You'll lead red teaming and penetration testing across a large, complex estate, from cloud and corporate IT to operational technology on the ground, and you'll have the influence to set how offensive security is done here.

About the opportunity
Join a global logistics and supply chain organisation that keeps critical freight moving across Australia and internationally
Large, complex workplace spanning corporate IT, cloud, customer-facing platforms and operational technology across depots and distribution sites
A newly shaped leadership role within the cyber security function, with real influence over how offensive security is run
Your work directly protects operations that customers and communities rely on every day

The role
Lead and grow the offensive security capability, covering penetration testing, red teaming and adversary simulation
Own the annual testing program,



prioritising effort against the organisation's biggest risks and most critical assets
Manage internal testers and third-party specialists, setting scope, quality standards and rules of engagement
Work alongside the defensive teams on purple team exercises to improve detection and response
Translate technical findings into explicit, risk-based reporting for technology and executive stakeholders, and drive remediation through to closure

What you'll bring
Robust hands-on background in penetration testing and/or red teaming across infrastructure, cloud, web applications and Active Directory
Experience leading a team or a testing function, including managing external providers
Solid understanding of attacker tradecraft and frameworks such as MITRE ATT&CK;
The ability to explain technical risk to non-technical audiences and influence senior stakeholders
Australian working rights

Highly regarded: industry certifications such as OSCP, OSEP, CRTO or CREST, and exposure to OT or industrial environments.

Interested?

Apply now, or reach out to Emily at PRA for a confidential chat: email_hidden

📌 Offensive Security Manager Sydney
🏢 PRA
📍 Sydney