About the job
Who Are We?
Postman stands as the foremost API platform globally, serving over 45 million developers and 500,000 organizations, including 98% of the Fortune 500. Our mission is to empower developers and professionals worldwide in building an API-first future by simplifying every aspect of the API lifecycle and enhancing collaboration, enabling the creation of superior APIs with increased speed.
Headquartered in San Francisco, Postman also has offices in Boston, New York, Austin, Tokyo, London, and Bangalore, where we originated. We are a privately held company, backed by notable investors such as Battery Ventures, BOND, Coatue, CRV, Insight Partners, and Nexus Venture Partners. Discover more at postman.com or connect with us on X via @getpostman.
P. S: We highly encourage reading The "API-First World" graphic novel for a deeper understanding of our overarching vision at Postman.
About the Team
The Information Security team at Postman operates under three fundamental pillars: Governance Risk & Compliance (GRC), Product Security, and Security Operations. We pride ourselves on being builders rather than mere checkbox-validators. We maintain active compliance with SOC 2 Type II, ISO 27001, ISO 42001, and HIPAA, and are in pursuit of FedRAMP High and CMMC Level 2 authorizations. Our security stack comprises Wiz, SentinelOne, Okta, Jamf, and 1Password, functioning effectively within a multi-cloud environment.
The Offensive Security team acts as the critical "red" component of our organization. Our role transcends merely identifying bugs; we simulate adversarial tactics to ensure our defenses withstand real-world challenges. Our focus is on continuous security validation, AI-enhanced adversary emulation, and pioneering offensive AI security research at the scale of Postman.
The Opportunity
We are in search of a Senior Manager, Offensive Security, who embodies both strategic vision and deep hacking expertise. You will be responsible for defining the strategic trajectory of Postman’s offensive security program, including the establishment of a dedicated Offensive AI Security capability from the ground up, serving as a vital partner to CISO leadership on threat-informed defense strategies.
This is not a conventional role where you simply manage a pre-existing program; instead, you will actively shape the future of offensive security at Postman over the next three years, with a clear goal of positioning us as an industry frontrunner in adversarial testing of AI systems, autonomous workflows, and LLM integrations.
You will lead a dynamic team that goes beyond merely reporting vulnerabilities...
