Asana

2 days ago

Manager, Offensive Security

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 15 hours agoStatus: Live

Job Summary

Lead and grow Asana’s Offensive Security function in Warsaw, owning an offensive security program that spans red team operations, application security, and vulnerability management. Define team roadmap and OKRs, plan adversary simulations, run cloud security assessments, and develop red team tooling and playbooks. Oversee security architecture reviews and SDLC controls, manage bug bounty and vulnerability management at scale, and translate technical findings into executive risk reports for leadership and legal.

Location: Warsaw

Workplace: Hybrid

Employment Type: Contract · Permanent

Job Function: Solutions Engineering & Sales Engineering

Seniority: Manager level

Key Responsibilities

•Lead, grow, and mentor an offensive security team across red team operations, application security, and vulnerability management while staying hands-on.
•Define team roadmap, OKRs, and priorities aligned with broader security and engineering strategy.
•Plan and execute red team operations and adversary simulation exercises across Asana’s infrastructure, products, and corporate environment.
•Perform cloud security assessments (misconfigurations, privilege escalation paths, and lateral movement opportunities) and oversee security architecture reviews and threat modeling.
•Own and operate the bug bounty program, mature vulnerability management, and implement technical SDLC security controls including PR blockers and automated pipeline gates.

Pay and Benefits

Salary: PLN 43,500 - 49,500 monthly

Equity and Bonus:Equity

Perks:Health InsuranceDentalTravel AllowanceGym MembershipRemote WorkLearning BudgetHome OfficeRsusParental LeavePaid Leave

Key Requirements

•8+ years of experience in offensive security or application security with hands-on depth in red team operations or enterprise web application penetration testing.
•3+ years of experience managing and mentoring an offensive or application security team while staying involved in technical execution.
•Proven track record leading end-to-end security assessments and operating/maturing a vulnerability management program at scale, including bug bounty ownership.
•Deep expertise in modern web application security flaws (OWASP Top 10 and beyond) and hands-on experience conducting cloud security assessments.
•Ability to read and understand source code across Python, Java, JavaScript/TypeScript, Go, and C/C++ to identify security weaknesses and advise on secure patterns.

Skills:LeadershipMentoringStrategic planningTechnical executionRisk reporting

Tech Stack:PythonJavaJavaScriptTypeScriptGoC/C++OWASP Top 10CVEsCWEsCVSSSASTDASTSCASDLC

Company Brief

Asana

Asana provides a work management platform that helps teams coordinate, track, and manage tasks, projects, and workflows. It offers collaboration, task tracking, automation, and reporting tools for organizations of all sizes.

Industry: Enterprise Software

Company Size: Enterprise (1,001+ employees)

Revenue: USD 500M to 1B

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: San Francisco, United States

Founded: 2008

Glassdoor: 4.2

Website LinkedIn Glassdoor

Loading job details...

Preparing the role view and application actions.

Asana

2 days ago

Manager, Offensive Security

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 15 hours agoStatus: Live

Job Summary

Location: Warsaw

Workplace: Hybrid

Employment Type: Contract · Permanent

Job Function: Solutions Engineering & Sales Engineering

Seniority: Manager level

Key Responsibilities

•Lead, grow, and mentor an offensive security team across red team operations, application security, and vulnerability management while staying hands-on.
•Define team roadmap, OKRs, and priorities aligned with broader security and engineering strategy.
•Plan and execute red team operations and adversary simulation exercises across Asana’s infrastructure, products, and corporate environment.
•Perform cloud security assessments (misconfigurations, privilege escalation paths, and lateral movement opportunities) and oversee security architecture reviews and threat modeling.
•Own and operate the bug bounty program, mature vulnerability management, and implement technical SDLC security controls including PR blockers and automated pipeline gates.

Pay and Benefits

Salary: PLN 43,500 - 49,500 monthly

Equity and Bonus:Equity

Perks:Health InsuranceDentalTravel AllowanceGym MembershipRemote WorkLearning BudgetHome OfficeRsusParental LeavePaid Leave

Key Requirements

•8+ years of experience in offensive security or application security with hands-on depth in red team operations or enterprise web application penetration testing.
•3+ years of experience managing and mentoring an offensive or application security team while staying involved in technical execution.
•Proven track record leading end-to-end security assessments and operating/maturing a vulnerability management program at scale, including bug bounty ownership.
•Deep expertise in modern web application security flaws (OWASP Top 10 and beyond) and hands-on experience conducting cloud security assessments.
•Ability to read and understand source code across Python, Java, JavaScript/TypeScript, Go, and C/C++ to identify security weaknesses and advise on secure patterns.

Skills:LeadershipMentoringStrategic planningTechnical executionRisk reporting

Tech Stack:PythonJavaJavaScriptTypeScriptGoC/C++OWASP Top 10CVEsCWEsCVSSSASTDASTSCASDLC

Company Brief

Asana

Industry: Enterprise Software

Company Size: Enterprise (1,001+ employees)

Revenue: USD 500M to 1B

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: San Francisco, United States

Founded: 2008

Glassdoor: 4.2

Website LinkedIn Glassdoor