Careers

Key Responsibilities

• Team Leadership: Manage, mentor, and support a small, dedicated team of internal penetration testers and offensive security professionals whose core mission is to proactively identify vulnerabilities across TT’s environment.
• Schedule & Engagement Management: Own and orchestrate the comprehensive penetration testing schedule, seamlessly coordinating engagements for both our internal testers and third-party vendors to ensure continuous coverage.
• Vendor Management: Manage relationships with external third-party penetration testing vendors. This includes scoping engagements, managing budgets, reviewing proposals, and ensuring the quality and timely delivery of external reports.
• Engineering Liaison: Serve as the primary point of contact and relationship owner between the Offensive Security team and TT’s Engineering and Product teams. Foster a collaborative culture of “security as a partner.”
• Vulnerability Management: Play a leading role in the vulnerability management lifecycle. Work directly with engineering to triage findings, establish remediation plans, and ensure vulnerabilities are patched within established Service Level Agreements (SLAs) and deadlines.
• Metrics & Reporting: Track, measure, and report on key performance indicators (KPIs) related to penetration testing coverage, vulnerability identification rates, and remediation timelines to executive leadership.
• Process Improvement: Continuously refine and streamline offensive security workflows, reporting mechanisms, and cross-departmental engagement models to make security testing smoother and more efficient.

Skills, Knowledge and Expertise

• Cybersecurity Workflow Knowledge: Deep understanding of penetration testing workflows, methodologies, and engagement lifecycles (e.g., scoping, execution, reporting, remediation tracking).
• Leadership & Management: Proven experience managing teams, projects, or programs, preferably within an Information Security or Technology department.
• Vendor Management Experience: Previous experience selecting, onboarding, and managing external security testing vendors or consultancies.
• Exceptional Communication: Strong interpersonal skills with the ability to translate security risks into actionable engineering tasks. You must be able to negotiate deadlines, handle pushback, and drive consensus across cross-functional teams.
• Organizational Skills: Excellent project management skills, with the ability to juggle multiple ongoing security assessments, remediation trackers, and vendor timelines simultaneously.
• Preferred Qualifications (Beneficial but not strictly required):

• Vulnerability Awareness: A basic technical awareness and understanding of common vulnerabilities and attack vectors (e.g., OWASP Top 10, CWEs) to facilitate informed conversations with both hackers and developers.
• Familiarity with Agile/DevOps: Understanding of modern software development lifecycles (SDLC) and how to integrate security testing into fast-paced engineering environments.
• Industry Certifications: Relevant management or security certifications (e.g., CISM, PMP, Security+, CISSP) are a plus.
• FinTech Experience: Previous experience working in the financial technology or trading industry.

Benefits

Compensation: Kč1,800,000 – Kč2,575,000 / year

• Health & Financial Security:
  • Pension contributions
• Time Off & Flexibility:
  • Enjoy the best of both worlds: the energy and collaboration of in-person work, combined with the convenience and focus of remote days. This is a hybrid position requiring three days of in-office collaboration per week, with the flexibility to work remotely for the remaining two days. Our hybrid model is designed to balance individual flexibility with the benefits of in-person collaboration, enhanced team cohesion, spontaneous innovation, hands-on mentorship opportunities and strengthens our company culture.
  • 25 days of Paid Time Off (PTO) per year, with the option to roll over unused days.
  • One dedicated day per year for volunteering.
  • Two professional development days per year to allow uninterrupted professional development.
  • An additional PTO day added during milestone anniversary years.
  • Generous parental leave for all parents (including adoptive parents).
• Work-Life Support & Resources:
  • Budget for tech accessories, including monitors, headphones, keyboards, and other office equipment.
  • Milestone anniversary bonuses.
• Wellness & Lifestyle Perks:
  • Subsidy contributions toward gym memberships and health/wellness initiatives (including discounted healthcare premiums, healthy meal delivery programs, or smoking cessation support).
• Our Culture:
• Forward-thinking, culture-based organization with collaborative teams that promote diversity and inclusion.