Senior Manager of Offensive Security

<div class="content-intro"><p><strong>Who we are </strong></p> <p>At Twilio, we’re shaping the future of communications, all from the comfort of our homes. We deliver innovative solutions to<a class="c-link" href="https://customers.twilio.com/" target="_blank" data-stringify-link="https://customers.twilio.com/" data-sk="tooltip_parent"> hundreds of thousands of businesses </a>and empower millions of developers worldwide to craft personalized customer experiences.</p> <p>Our dedication to <a class="c-link" href="https://www.twilio.com/en-us/blog/open-work" target="_blank" data-stringify-link="https://www.twilio.com/en-us/blog/open-work" data-sk="tooltip_parent">remote-first work</a>, and strong culture of connection and global inclusion means that no matter your location, you’re part of a vibrant team with diverse experiences making a global impact each day. As we continue to revolutionize how the world interacts, we’re acquiring new skills and experiences that make work feel truly rewarding. Your career at Twilio is in your hands.<br><br>We use Artificial Intelligence (AI) to help make our hiring process efficient. That said, every hiring decision is made by real Twilions!</p> <p><span style="color: rgb(255, 255, 255);">.</span></p></div><p><strong>See yourself at Twilio</strong></p> <p>Join the team as Twilio’s next Senior Manager of Offensive Security.</p> <p><strong>About the job</strong></p> <p>As the Senior Manager of Offensive Security and Red Teaming, you will lead an elite team of ethical hackers and security penetration testers dedicated to proactively uncovering and mitigating vulnerabilities across the enterprise and our products. You are a technical expert and a strategic leader. You will design and oversee sophisticated adversary emulation exercises that challenge our defenses, ensuring that our security team and overall security posture are prepared for real-world threats.</p> <p><strong>Responsibilities</strong></p> <p>In this role, you’ll:</p> <ul> <li><strong>Strategic Leadership:</strong> Develop and execute a multi-year roadmap for offensive security, including red teaming, penetration testing, bug bounty, and vulnerability research.</li> <li><strong>Adversary Emulation:</strong> Design and lead full-scope red team engagements that simulate Advanced Persistent Threats (APTs) to test detection and response capabilities.</li> <li><strong>Program Management:</strong> Oversee the end-to-end lifecycle of offensive engagements, from initial scoping and Rules of Engagement (RoE) to final reporting.</li> <li><strong>Purple Teaming:</strong> Facilitate collaborative "Purple Team" exercises with Detection and Response (TDR) to improve detection logic and incident response playbooks.</li> <li><strong>Executive Communication:</strong> Translate complex technical findings into actionable business risk assessments for C-suite executives and Board members.</li> <li><strong>Team Mentorship:</strong> Recruit, retain, and develop a high-performing team of offensive security engineers, providing technical guidance and career coaching.</li> <li><strong>Vulnerability Management Integration:</strong> Partner with vulnerability management, product, and engineering to ensure that findings from offensive tests are prioritized and remediated effectively.</li> <li><strong>Tooling Automation:</strong> Oversee the development of custom scripts, payloads, and C2 (Command and Control) frameworks to enhance the team’s stealth and efficiency.</li> <li><strong>Adversarial AI Testing:</strong> Conduct specialized threat modeling for AI-native applications, focusing on the OWASP Top 10 for LLMs and MITRE ATLAS (Adversarial Threat Landscape for AI Systems).</li> <li><strong>AI attacks and mitigations: </strong>Design and execute manual and automated Prompt Injection Jailbreaking to bypass model guardrails, system prompts, and safety filters.</li> <li><strong>Regulatory Compliance:</strong> Ensure all offensive activities align with legal, ethic ... (truncated, view full listing at source)