Senior Manager - Cyber Security Engineers

Job Overview

The Senior Manager for Cyber Security Engineers will oversee the creation and management of a continuous security validation framework throughout the banking infrastructure. This leadership role involves transforming threat intelligence and authorized adversarial scenarios into automated and repeatable assessments involving cloud-based services, infrastructures, AI systems, and associated model supply chains. Success criteria include enhanced threat detection, expedited remediation processes, dependable deployment checkpoints, and comprehensive executive reporting.

Key Responsibilities

• Develop and lead the strategic plan, roadmap, and daily operations for continuous cybersecurity control validation.
• Coordinate automated assessments spanning cloud platforms, enterprise infrastructure, AI applications, and model supply chains.
• Convert approved threat scenarios from second-line security into a structured coverage matrix that aligns with business risk.
• Manage the integration of MITRE ATLAS and OWASP LLM threat intelligence, employing Jira automation to comply with a seven-day SLA for new techniques.
• Translate evolving attack tactics into executable validation test cases deployed within agreed timeframes.
• Supervise the consolidation, removal of duplicates, ownership assignment, and lifecycle tracking of findings through platforms such as DefectDojo and Attestation.
• Establish severity-based remediation deadlines and enforce mean-time-to-remediate conditions before approving redeployment.
• Collaborate with engineering, architecture, risk management, and technology teams to address critical weaknesses and enhance control efficacy.
• Maintain Power BI dashboards to report on open findings, remediation progress, gate pass rates, threat coverage, and prompt-injection prevention metrics.
• Deliver concise management insights concerning exposures, trends, exceptions, overdue actions, and deployment assurance.
• Define quality benchmarks for validation evidence, repeatability of tests, scenario traceability, and audit preparedness.
• Ensure clear separation between first-line control validation and second-line independent red teaming, escalation, and challenge activities.

Qualifications and Requirements

• Significant leadership experience in cybersecurity engineering, offensive security, adversarial validation, or similar assurance roles within complex enterprises.
• Proven accomplishments replacing episodic manual penetration testing with continuous or automated control-validation methods.
• Strong technical expertise in cloud security, infrastructure defenses, application delivery pipelines, and security automation tools.
• Hands-on experience with autonomous penetration testing platforms such as AWS Security Agent, Horizon3, or similar alternatives.
• Practical knowledge of AI red teaming tools including Garak, PyRIT, Claude Security, Opus 4.x, and Codex.
• Ability to design or oversee testing aligned with OWASP LLM Top 10 and MITRE ATLAS frameworks.
• Expertise in operationalizing threat intelligence into repeatable security tests, integrated engineering workflows, and measurable service levels.
• Familiarity with vulnerability management processes, prioritization strategies, remediation oversight, and deployment approval controls.
• Competency in defining impactful security metrics and effectively communicating complex technical risks via dashboards and reports for executive audiences.
• Understanding of the differentiation between first-line and second-line security roles, especially distinguishing control validation from independent red teaming.
• Experience guiding technical teams, setting delivery standards, assessing evidence quality, and influencing senior leadership.
• Background in financial services, banking, or other tightly regulated sectors is considered a plus.