{"id":2053632,"url":"https://alion.io/job/varicent-principal-offensive-security","title":"Principal Offensive Security","company":{"id":686603,"name":"Varicent","domain":"varicent.com","url":"https://alion.io/company/varicent","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Sales","role_family":"Sales","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Toronto, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":138200,"max":200000,"currency":"CAD","period":"year","gross":null,"usd_annual":140693},"salary_estimate":null,"experience_years_min":12,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agentic Workflows","optional":false},{"name":"LLM","optional":false},{"name":"Red Teaming","optional":false},{"name":"Rest API","optional":false},{"name":"ServiceNow","optional":false}],"status":"live","first_seen_at":"2026-10-07T20:15:54Z","employer_posted_date":"2026-10-07","last_verified_at":"2026-10-14T08:46:17Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"At Varicent, we’re not just transforming the Sales Performance Management (SPM) market-we’re redefining how organizations achieve revenue success. Our cutting-edge SaaS solutions empower revenue leaders globally to design smarter go-to-market strategies, maximize seller performance, and unlock untapped potential. Varicent stands at the forefront of innovation, celebrated as a market leader in the 2025 Forrester Wave Report for SPM, 2023 Ventana Research Revenue Performance Management (RPM) Value Index, Gartner Peer Insights, 2024 Gartner SPM Market Guide, and G2. Our solutions are trusted by a diverse range of global industry leaders like T-Mobile, ServiceNow, Wawanesa Bank, Shaw Industries, Moody's, Stryker and hundreds more. Here’s why you’ll thrive at Varicent:\nInnovate with Purpose: Build impactful solutions for customers worldwide.\nJoin Excellence: Work in a diverse, collaborative, and innovative team.\nShape the Future: Lead in redefining revenue optimization.\nGrow Together: Unlock your potential in a supportive environment.\nJoin us at Varicent-where your talent and ambition meet limitless opportunities for success!\nWe're looking for a Principal Offensive Security engineer to be the senior technical authority for our offensive security practice across applications, cloud environments, enterprise systems, and AI-enabled products.\nThis is an individual contributor role for a recognized expert. You won't just execute tests. You'll decide which security problems matter most, define how the organization approaches them, and coach others to raise the technical bar. You'll work across Engineering, Product, Security, engineering, Legal & Compliance and security leaders will rely on your judgment when making risk decisions.\nWhat You'll Do\nDefine the Offensive Security Approach\nFrame the problem space: identify which offensive security risks matter most to the business, and set the technical strategy, frameworks, and priorities that guide how multiple teams address them.\nShape the multi-year technical roadmap for penetration testing, red teaming, AI security validation, and vulnerability research.\nDefine the standards, methodologies, and metrics that make offensive security work measurable and tied to risk reduction.\nAnticipate downstream impact, such as emerging attack techniques, architectural shifts, and AI adoption, and bring it into planning before it becomes an incident.\nLead Complex Security Testing and Validation\nPersonally lead the most complex and ambiguous engagements across web, API, mobile, cloud, container, and AI-enabled systems.\nDesign and guide red team operations, adversary simulations, and purple team exercises.\nSet technical direction and quality bars for external penetration testing partners and vendors, and review their findings and methodology.\nEvolve attack surface management and continuous security validation into a repeatable, scalable capability.\nSecure AI-Enabled Products\nDefine the organization's approach to AI red teaming for LLM-enabled products and agentic workflows, including threat models, test methodologies, and risk criteria.\nWork with AI and engineering teams to build security into the AI development lifecycle through architecture and design reviews.\nCreate scalable, reusable approaches to AI security testing, validation, and risk assessment that other teams can adopt.\nShape Vulnerability Management\nSet the technical direction for vulnerability triage, prioritization, remediation, and retesting, with risk-based practices adopted across engineering.\nResolve the hardest triage and severity decisions where the right answer isn't clear.\nEvolve the bug bounty and vulnerability disclosure programs, including scope, policy, and researcher engagement.\nInfluence Without Authority\nBuild formal and informal networks across Engineering, Product, Security Operations, Compliance, and Legal to align groups on security priorities.\nTranslate technical findings into business risk and present trends and recommendations to senior leadership.\nMentor and coach security engineers, set the technical standard for the team, and informally guide those who run day-to-day testing.\nHelp shape the future of AI-enabled offensive security across the organization.\nWhat You'll Bring\n12+ years of related Information Security experience with a Bachelor's degree, including 8+ years in Offensive Security and 4+ years in Development or Engineering.\nA track record as a recognized expert whom others seek out guidance, with demonstrated impact on offensive security programs in SaaS and cloud environments.\nDeep, hands-on expertise in penetration testing, red teaming, vulnerability research, vulnerability management, and security testing of AI-enabled products.\nStrong command of application security, cloud security, attack surface management, and secure development practices.\nExperience with modern cloud environments, APIs, web applications, containers, and AI/LLM technologies.\nProven ability to work through ambiguous, cross-functional problems with high autonomy, and to define the approach rather than follow one.\nAbility to translate technical findings into business risk and influence stakeholders at all levels, including executives.\nExperience coaching and raising the technical capability of others without formal management authority.\nRelevant certifications such as OSCP, OSWE, GXPN, GPEN, CISSP, CCSP, or cloud security certifications are considered an asset.\nWhat Success Looks Like\nFirst 90 Days\nAssess the current offensive security landscape and identify the highest-impact problems, not just the most visible ones.\nBuild trusted relationships across engineering, security, and business teams.\nDefine the technical roadmap and priorities for continuous security validation.\n6+ Months\nEstablish scalable AI-enabled offensive security methods and standards that other teams adopt.\nImprove vulnerability management effectiveness and remediation outcomes through clearer prioritization and risk-based practices.\nRaise the technical bar of the security team through coaching, reviews, and shared frameworks.\nLong-term (7+ months): Mature, Measure & Reduce Risk\nGuide the scaling of autonomous vulnerability management across critical assets and environments.\nMature AI-enabled red team capabilities and continuous, threat-informed security validation.\nDemonstrate measurable reductions in organizational risk through AI-enabled offensive security capabilities.\nFor this role, the estimated annual base salary range is between $138,200.00 - $200,000.00 (CAD). In addition to base salary, our compensation package may include bonuses, commissions for eligible sales roles, and a comprehensive benefits package. The actual base salary will vary based on factors including individual qualifications and market data, as objectively assessed during the interview process. \nThis posting is for a new vacancy. \nThis hiring process utilizes artificial intelligence tools to assist in candidate screening and assessment. Our AI tools are designed to complement - not replace - human decision-making. \nOverview of Benefits: \nHealth & Wellness - Comprehensive medical, dental, and vision coverage tailored to your local needs \nTime Off - PTO and public holidays to rest, recharge, and do what matters most \nVolunteer Days - Dedicated time to give back and support the communities that matter to you \nIgnite Days - Dedicated learning days to support continuous growth, skill development, and professional learning \nFinancial - Compensation that reflects your market and your value \nRetirement - Retirement plans designed to help you build long-term financial security \nTuition Assistance - Invest in your growth with support for continuing education and professional development \nFlexibility - Work where you thrive, with remote and hybrid options available across most regions\nVaricent is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. If you require accommodation at any time during the recruitment process please email \nVaricent is also committed to compliance with all fair employment practices regarding citizenship and immigration status. By applying for a position at Varicent and/or by using this portal, you declare and confirm that you have read and agree to our Job Applicant Privacy Notice and that the information provided by you as part of your application is true and complete and includes no misrepresentation or material omission of fact","description_format":"text","description_chars":8734,"description_truncated":false,"requirements":{"experience_years_min":12,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Professional development","Retirement plans"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Sales Enablement"],"lifecycle":[{"event":"open","at":"2026-10-07T22:38:35Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":6,"expected_fill_days":55,"reasons":["conf:3","win:early"],"computed_at":"2026-10-14T06:34:16Z"},"pay":{"stated_usd_annual":140693,"is_top_pay":false},"html_url":"https://alion.io/job/varicent-principal-offensive-security","json_url":"https://alion.io/job/varicent-principal-offensive-security.json","meta":{"generated_at":"2026-10-14T12:28:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15183,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":686603},"rest":"https://alion.io/mcp/rest/get_company?id=686603"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fvaricent-principal-offensive-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fvaricent-principal-offensive-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fvaricent-principal-offensive-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/varicent-principal-offensive-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fvaricent-principal-offensive-security"}]}