Sr. Manager - Global Application Security

Job Title: Sr. Manager – Global Offensive Security

Job Location: Bangalore

ABOUT UNILEVER:

Be part of the world’s most successful, purpose-led business. Work with brands that are well-loved around the world, that improve the lives of our consumers and the communities around us. We promote innovation, big and small, to make our business win and grow; and we believe in business as a force for good. Unleash your curiosity, challenge ideas and disrupt processes; use your energy to make this happen. Our brilliant business leaders and colleagues provide mentorship and inspiration, so you can be at your best. Every day, nine out of ten Indian households use our products to feel good, look good and get more out of life – giving us a unique opportunity to build a brighter future.

Every individual here can bring their purpose to life through their work. Join us and you’ll be surrounded by inspiring leaders and supportive peers. Among them, you’ll channel your purpose, bring fresh ideas to the table, and simply be you. As you work to make a real impact on the business and the world, we’ll work to help you become a better you.

ABOUT GDT:

GDT is the global digital and technology engine of Unilever offering business services, technology, and enterprise solutions. GDT serves over 190 locations and through a network of specialized service lines and partners delivers insights and innovations, user experiences and end-to-end seamless delivery making Unilever Purpose Led and Future Fit. 

Role Purpose:

This role leads the execution, governance, and continuous improvement of Unilever’s Offensive Security program, ensuring robust identification and validation of exploitable risks across applications, APIs, mobile, cloud, OT, and emerging technologies such as AI. The role combines Tech program ownership, vendor governance, compliance alignment, and technical oversight, backed by strong prior hands-on experience in penetration testing and red teaming.

Role Summary:

The Offensive Security Manager – reporting to Director of Proactive Security - is responsible for driving a structured, risk-based offensive security program globally aligned to enterprise security strategy, regulatory requirements, and industry standards. This includes ownership of the end-to-end penetration testing, red teaming lifecycle, deception technologies, governance of external vendors and MSSPs, and ensuring consistent, high-quality execution across all testing activities.

The role requires a balance of program leadership, technical depth, and governance discipline. While the primary focus is on program ownership, audit readiness, and stakeholder management, the individual is expected to leverage prior hands-on offensive security experience to validate findings, guide testing strategies, and ensure meaningful risk outcomes.

The manager will establish and manage SOPs, policies, and standards for offensive security, ensure alignment with frameworks such as NIST, OWASP, and MITRE ATT&CK, and maintain readiness for internal and external audits. The role also drives KPIs, coverage metrics, and reporting, while collaborating with TVM, Cloud Security, GRC, and business teams to ensure timely remediation and continuous risk reduction.

Main Accountabilities

• Responsible to manage offensive security program, including strategy, planning, execution, and governance.

• Manage the end-to-end pentest, red team and other offensive security assessment lifecycle.

• Lead vendor/MSSP governance, including SLAs, KPIs, quality assurance, reporting standards, and commercial oversight.

• Ensure audit preparedness and compliance, maintaining evidence, documentation, and alignment with frameworks (NIST, OWASP, MITRE).

• Validate and challenge testing outputs, ensuring accuracy, depth, and risk-based prioritization of findings.

• Drive remediation governance, collaborating with application, cloud, infrastructure, and OT teams to track and close risks.

• Define and enforce SOPs, policies, and standards, and maintain the annual pentest calendar, timeliness, and stakeholder alignment.

• Support advanced initiatives such as red teaming, AI security testing, and OT offensive assessments.

Key Skills and Relevant Experience

Skills:

• Strong expertise in offensive security methodologies (pentesting, red teaming) across web, API, mobile, and cloud.

• Deep understanding of OWASP Top 10, API security risks, and common attack techniques, MITRE, NIST, CIS etc.

• Proven capability in vendor governance, SLA/KPI management, and quality control of security testing.

• Experience in defining and managing SOPs, policies, and audit/compliance requirements.

• Solid understanding of cloud security risks (Azure/AWS/GCP) and modern architectures.

• Ability to drive risk-based prioritization and remediation with clear business context.

• Strong stakeholder management, communication, and program leadership skills.

Experience:

• 10-15 years of experience in Offensive Security, Application Security, or Penetration Testing.

• Prior hands-on experience in penetration testing and/or red teaming (web, API, cloud), OT testing is added advantage.

• Experience of leading offensive security programs in enterprise environments.

• Experience managing external vendors/MSSPs, including delivery, quality, and governance.

• Exposure to audit, compliance, and regulatory requirements in cybersecurity programs.

• Familiarity with enterprise environments spanning applications, cloud, infrastructure, and OT.

• Certifications such as OSCP, CISSP, CCSP (or equivalent) are advantageous.

LEADERSHIP SKILLS

• CARE DEEPLY: We care about how consumers experience our brands, the growth and development of our people, and their impact on the planet. We emphasize the importance of performance and care, moving from ambiguity about success to fairness and transparency. 

• FOCUS ON WHAT COUNTS: We prioritize what truly matters, setting clear and stretching goals. We aim to shift from having everything as a priority to focusing on fewer, bigger things that are delivered to conclusion and are being rewarded. 

• STAY THREE STEPS AHEAD: We encourage bold and creative thinking to make breakthroughs in performance. We focus on anticipating and staying ahead of consumer needs and external trends, shifting from reacting to leading, shaping, and disrupting the market. 

• DELIVER WITH EXCELLENCE: The emphasis is on delivering everything with excellence and pace, taking personal ownership, and holding each other accountable. We aim to shift from pride in thinking to pride in execution, developing breakthrough solutions and ensuring the best outcomes. 

Our commitment to Equality, Diversity & Inclusion 

• Unilever embraces diversity and encourages applicants from all walks of life! This means giving full and fair consideration to all applicants and continuing development of all employees regardless of age, disability, gender reassignment, race, religion or belief, sex, sexual orientation, marriage and civil partnership, and pregnancy and maternity. 

Note: "All official offers from Unilever are issued only via our Applicant Tracking System (ATS). Offers from individuals or unofficial sources may be fraudulent—please verify before proceeding."