The Role
Leads the internal Offensive Security team, overseeing penetration-testing schedules, third-party vendors, vulnerability remediation, engineering partnerships, reporting, KPIs, and process improvements. The role is primarily managerial and operational, requiring knowledge of penetration-testing workflows, vulnerability lifecycles, vendor management, project coordination, and cross-functional communication. Preferred qualifications include awareness of common vulnerabilities, Agile and DevOps practices, relevant security or management certifications, and FinTech experience.
Summary Generated by Built In
Trading Technologies is seeking an organized, process-driven, and highly communicative Offensive Security Manager to lead our internal Offensive Security (Offsec) team. In this role, you will act as the crucial bridge between our security initiatives and our engineering teams. While this is primarily a management and operational role rather than a hands-on technical hacking position, you will need a solid foundational understanding of penetration testing methodologies and vulnerability lifecycles to be successful.
You will own the penetration testing schedule, manage critical vendor relationships, and drive our vulnerability management program to ensure that identified risks in TT’s platforms, systems, and applications are effectively communicated and remediated on time.
Key Responsibilities
- Team Leadership: Manage, mentor, and support a small, dedicated team of internal penetration testers and offensive security professionals whose core mission is to proactively identify vulnerabilities across TT’s environment.
- Schedule & Engagement Management: Own and orchestrate the comprehensive penetration testing schedule, seamlessly coordinating engagements for both our internal testers and third-party vendors to ensure continuous coverage.
- Vendor Management: Manage relationships with external third-party penetration testing vendors. This includes scoping engagements, managing budgets, reviewing proposals, and ensuring the quality and timely delivery of external reports.
- Engineering Liaison: Serve as the primary point of contact and relationship owner between the Offensive Security team and TT's Engineering and Product teams. Foster a collaborative culture of "security as a partner."
- Vulnerability Management: Play a leading role in the vulnerability management lifecycle. Work directly with engineering to triage findings, establish remediation plans, and ensure vulnerabilities are patched within established Service Level Agreements (SLAs) and deadlines.
- Metrics & Reporting: Track, measure, and report on key performance indicators (KPIs) related to penetration testing coverage, vulnerability identification rates, and remediation timelines to executive leadership.
- Process Improvement: Continuously refine and streamline offensive security workflows, reporting mechanisms, and cross-departmental engagement models to make security testing smoother and more efficient.
Skills, Knowledge and Expertise
Essential Qualifications:
- Cybersecurity Workflow Knowledge: Deep understanding of penetration testing workflows, methodologies, and engagement lifecycles (e.g., scoping, execution, reporting, remediation tracking).
- Leadership & Management: Proven experience managing teams, projects, or programs, preferably within an Information Security or Technology department.
- Vendor Management Experience: Previous experience selecting, onboarding, and managing external security testing vendors or consultancies.
- Exceptional Communication: Strong interpersonal skills with the ability to translate security risks into actionable engineering tasks. You must be able to negotiate deadlines, handle pushback, and drive consensus across cross-functional teams.
- Organizational Skills: Excellent project management skills, with the ability to juggle multiple ongoing security assessments, remediation trackers, and vendor timelines simultaneously.
- Preferred Qualifications (Beneficial but not strictly required):
Preferred Qualifications:
- Vulnerability Awareness: A basic technical awareness and understanding of common vulnerabilities and attack vectors (e.g., OWASP Top 10, CWEs) to facilitate informed conversations with both hackers and developers.
- Familiarity with Agile/DevOps: Understanding of modern software development lifecycles (SDLC) and how to integrate security testing into fast-paced engineering environments.
- Industry Certifications: Relevant management or security certifications (e.g., CISM, PMP, Security+, CISSP) are a plus.
- FinTech Experience: Previous experience working in the financial technology or trading industry.
Benefits
We offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance.
- Health & Financial Security:
- Pension contributions
- Time Off & Flexibility:
- Enjoy the best of both worlds: the energy and collaboration of in-person work, combined with the convenience and focus of remote days. This is a hybrid position requiring three days of in-office collaboration per week, with the flexibility to work remotely for the remaining two days. Our hybrid model is designed to balance individual flexibility with the benefits of in-person collaboration, enhanced team cohesion, spontaneous innovation, hands-on mentorship opportunities and strengthens our company culture.
- 25 days of Paid Time Off (PTO) per year, with the option to roll over unused days.
- One dedicated day per year for volunteering.
- Two professional development days per year to allow uninterrupted professional development.
- An additional PTO day added during milestone anniversary years.
- Generous parental leave for all parents (including adoptive parents).
- Work-Life Support & Resources:
- Budget for tech accessories, including monitors, headphones, keyboards, and other office equipment.
- Milestone anniversary bonuses.
- Wellness & Lifestyle Perks:
- Subsidy contributions toward gym memberships and health/wellness initiatives (including discounted healthcare premiums, healthy meal delivery programs, or smoking cessation support).
- Our Culture:
- Forward-thinking, culture-based organization with collaborative teams that promote diversity and inclusion.
Trading Technologies (www.tradingtechnologies.com) is a global capital markets platform services company providing market-leading technology for the end-to-end trading operations of Tier 1 banks, brokerages, money managers, hedge funds, proprietary traders, Commodity Trading Advisors (CTAs), commercial hedgers, and risk managers. With its roots in listed derivatives, the Software-as-a-Service (SaaS) company delivers “multi-X” solutions, with “X” representing asset classes, functions, workflows, and geographies. This multi-X approach features trade execution services across futures and options, fixed income, foreign exchange (FX), and cryptocurrencies, augmented by solutions for data and analytics, including transaction cost analysis (TCA); quantitative trading; compliance and trade surveillance; clearing and post-trade allocation; and infrastructure services. The award-winning TT platform ecosystem also helps exchanges deliver innovative solutions to their market participants and technology companies to distribute their complementary offerings to Trading Technologies’ clients.
Trading Technologies is backed by leading global investment firms Thoma Bravo, one of the world’s largest and most experienced software investors, and 7Ridge, a global growth equity firm focused on technology-enabled businesses.
This investment supports Trading Technologies’ continued focus on product innovation, platform scalability, and long-term growth for customers and partners worldwide.
Trading Technologies (TT) is an equal-opportunity employer. Equal employment has been, and continues to be, a required practice at the Company. Trading Technologies’ practice of equal employment opportunity is to recruit, hire, train, promote, and base all employment decisions on ability rather than race, color, religion, national origin, sex/gender orientation, age, disability, sexual orientation, genetic information, parental status, veteran, or any other protected status. Additionally, TT participates in the E-Verify Program for US offices.
About
Trading Technologies is a Software-as-a-Service (SaaS) technology platform provider to the global capital markets industry. The company’s award-winning TT® platform connects to the world’s major international exchanges and liquidity venues in listed derivatives alongside a growing number of asset classes, including fixed income and cryptocurrencies. The TT platform delivers advanced tools for trade execution and order management, market data solutions, analytics, trade surveillance, risk management, and infrastructure services to the world’s leading sell-side institutions, buy-side firms, and exchanges. The company’s blue-chip client base includes Tier 1 banks as well as brokers, money managers, hedge funds, proprietary traders, Commodity Trading Advisors (CTAs), commercial hedgers, and risk managers. These firms rely on the TT ecosystem to manage their end-to-end trading operations. In addition, exchanges utilize TT’s technology to deliver innovative solutions to their market participants. TT also strategically partners with technology companies to make their complementary offerings available to Trading Technologies’ global client base through the TT ecosystem.
Skills Required
- Deep understanding of penetration testing workflows, methodologies, and engagement lifecycles
- Proven experience managing teams, projects, or programs, preferably in information security or technology
- Experience selecting, onboarding, and managing external security testing vendors or consultancies
- Strong interpersonal and communication skills for translating security risks into engineering tasks and driving consensus
- Excellent project management and organizational skills for managing security assessments, remediation trackers, and vendor timelines
- Basic technical awareness of common vulnerabilities and attack vectors, including OWASP Top 10 and CWEs
- Understanding of Agile, DevOps, and modern software development lifecycles
- Relevant management or security certifications, such as CISM, PMP, Security+, or CISSP
- Experience in the financial technology or trading industry
Trading Technologies Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Trading Technologies and has not been reviewed or approved by Trading Technologies.
-
Healthcare Strength — Health coverage is described as competitive, with multiple plan options, discounted premiums, and wellness initiatives such as gym subsidies and healthy meal programs.
-
Leave & Time Off Breadth — Paid time off is portrayed as generous, combining substantial PTO, paid holidays, flexible schedules, and added allowances like training days and volunteer time.
-
Parental & Family Support — Family supports include generous parental leave for primary caregivers, backup care for children, adults, and pets, adoption assistance, and dedicated spaces for new mothers.
Trading Technologies Insights
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Trading Technologies creates professional trading software, infrastructure and data solutions for a wide variety of users. Be aware of fraudulent job postings: It has come to our attention that individuals pretending to represent Trading Technologies are posting fake job ads on LinkedIn and possibly other job boards. These individuals conduct candidate interviews via Skype and extend offers, likely with the intent to collect personal information such as banking information, social security number or date of birth. They use a Gmail email address that is not affiliated with Trading Technologies. Only emails using a tradingtechnologies.com or trade.tt email address are authentic. Although we use third party recruiting agencies on a case-by-case basis, all candidates speak with a staff member who has a valid company email address before any offers are extended or personal information collected. Our open positions are posted on BuiltIn and on the Careers page of our website.
Why Work With Us
Cited by Crain's and Built In Chicago as one of Chicago’s best places to work, Trading Technologies is a pioneering financial technology firm that constantly pushes boundaries in the trading industry. TT is a highly collaborative and culture-first organization that fosters an environment of creativity and camaraderie to achieve results.
Gallery
.png){kind=logo}
