Manager, Offensive Security

Asana seeks a Manager of Offensive Security to lead the Offensive Security function in Warsaw. The role involves managing a team spanning red team operations, application security, and vulnerability management, driving strategic direction and hands-on execution. Responsibilities include leading red team operations, cloud security assessments, bug bounty program, and translating vulnerabilities into executive reports. The role is hybrid with in-office days Monday, Tuesday, and Thursday.

8+ years of experience in offensive security or application security, with significant hands-on depth in red team operations or web application penetration testing. 3+ years of experience managing and mentoring a team. Proven track record of leading security assessments and maturing vulnerability management programs. Deep expertise in web application security flaws (OWASP Top 10), cloud security assessments, and ability to read source code in multiple languages (Python, Java, JavaScript/TypeSci