Manager, Offensive Security

We need to output HTML fragment with sections only where content exists. Use

for headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We need to map content. The posting includes: intro paragraph about company, then "Envision Yourself at Barracuda" then description of role. We need sections: maybe "About the role" (intro), "Responsibilities" (list of duties), "Requirements" (maybe experience), "Qualifications" (education, etc), "Skills" (technical skills), "Benefits" (list of benefits), Pay and Schedule only if present (they are not). So we should not include Pay or Schedule sections. We must not repeat job title as heading. No Job ID. We must preserve all substantive info, no boilerplate like EEO, cookie, navigation, legal, duplicated lines, application instructions. Remove "Job ID: 27-0467". Also remove "Envision Yourself at Barracuda" maybe it's a heading but we can treat as part of About the role? It's a phrase; we can incorporate into About the role paragraph. We need to use

• for any list of duties/requirements/benefits. Use

  for prose. We must not create sections with filler text. So each section must have real content. Let's extract content: About the role: The paragraph(s) describing the role: "Barracuda is seeking a Manager, Offensive Security to lead a team of cybersecurity engineers focused on threat detection and attack stimulation across a wide range of technologies, including SaaS, endpoint, network, and cloud platforms. In this role, you will play a critical part in driving detection innovation, engineering processes, and attack and defend lifecycle for Barracuda XDR. This is a unique opportunity to blend security operations, data engineering, detection engineering, offensive security and leadership in a global 24x7 Security Operations Center (SOC). You will work with over 50 different data sources and lead efforts aligned with the MITRE ATT&CK framework, while fostering collaboration between red, purple, green and blue teams to advance threat detection and response along with ensuring overall improvement and enhancement of Barracuda Security Operations Center." That's the role description. Responsibilities: The bullet list under "What You’ll Be Working On" includes several subheadings: Proactive Engineering & Detection Development, Attack Operations & Adversary Simulation, Threat Hunting & Proactive Detection, Strategic Planning & Operations, Innovation and R&D. Each has bullet points. We need to combine into a list of duties? Probably we can list each bullet as

• . Could also group under subheadings but we only allowed

  for section headings, not subheadings inside. Could still include

  inside? The instruction: use

  for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). It doesn't forbid other headings, but better to stick to those. We can just make a flat list of responsibilities. Let's extract each bullet: Under Proactive Engineering & Detection Development: - Lead and mentor a team of cybersecurity Engineers - Develop, test and tune detection rules for multiple attack vectors across cloud, network, and endpoint telemetry. - Design and maintain CI/CD pipelines to version and deploy detection rules. - Implement and manage the full lifecycle of SIEM detection rules. - Foster collaboration between red and purple teams to drive offensive and defensive innovation. - Create and execute sprint projects using Agile methodologies to improve SOC maturity and R&D efforts. - Implement proactive threat hunting initiatives across customer networks. - Guide and monitor your team through complex security incidents such as ransomware. Attack Operations & Adversary Simulation: - Lead adversary simulation exercises and exploit research initiatives - Design and execute detection testing scenarios and breach simulations - Conduct tabletop exercises and kill chain rehearsals - Develop and manage a open-source red teaming repository for attacks and stimulations - Develop threat modeling frameworks and campaign replay scenarios - Conduct and manage live “attack and defend” exercises to test detection and response readiness Threat Hunting & Proactive Detection: - Implement proactive threat hunting initiatives across customer networks - Lead efforts in identifying emerging TTPs and zero-day discovery - Oversee malware analysis and hunt campaigns - Drive trend analysis and adversary profiling initiatives - Manage threat publications such as blogs, webinars, and podcasts. Strategic Planning & Operations: - Drive strategic planning, goal setting, and roadmap execution. - Ensure key SOC metrics, SLAs, and detection performance standards are met. - Coordinate and maintain a global 24x7x365 on-call schedule. - Provide regular reporting and weekly metrics related to Level 5 operations. - Serve as a key point of escalation for critical security incidents. - Lead implementation of new rules based on evolving vulnerabilities and adversary TTPs. Innovation and R&D: - Lead R&D for emerging use cases, tools, and integration efforts. - Guide to the evaluation and adoption of new technologies aligned with future-facing cyber defense. - R&D around use of AI and automation for offensive security. We need to ensure we keep all. Requirements: maybe the "What You Bring To The Role" section includes experience requirements: 6+ years in security operations, detection engineering and offensive security; 2-3 years in leadership experience managing high-performing cybersecurity teams; 3–4 years of hands-on experience with Python and SQL; Experience with Kali and other pentesting/hacking tools; Developed and managed lab environments for attack and defend exercises; Bachelor’s or master's degree in Cybersecurity, Information Security, or related field.; Strong understanding of cloud platforms (AWS, Azure, GCP); Experience with SIEMs like Elastic and Databricks, including advanced detection implementation; Familiarity with Windows, Unix, and Linux systems; Experience with threat intelligence platforms (e.g., Anomali, Cybersixgill); Strong verbal and written communication skills; Demonstrated ability to work across global time zones (U.S. East, India and Ireland teams); Strong project management, problem-solving, and decision-making skills; Ability to lead during high-pressure cybersecurity incidents and guide team response. We could split into Requirements (years of experience) and Qualifications (education) and Skills (technical). But we have headings: Requirements, Qualifications, Skills. We need to decide what goes where. The instruction: Use those headings as appropriate. We can put: - Requirements: experience requirements (years, leadership, etc.) - Qualifications: education (Bachelor's/master's) - Skills: technical skills (Python, SQL, Kali, SIEMs, cloud platforms, etc.) plus soft skills. But we must not create sections with filler. So each must have real content. Let's parse: Experience requirements: - 6+ years in security operations, detection engineering and offensive security - 2-3 years in leadership experience managing high-performing cybersecurity teams - 3–4 years of hands-on experience with Python and SQL - Experience with Kali and other pentesting/hacking tools - Developed and managed lab environments for attack and defend exercises Education: - Bachelor’s or master's degree in Cybersecurity, Information Security, or related field. Technical skills / knowledge: - Strong understanding of cloud platforms (AWS, Azure, GCP) - Experience with SIEMs like Elastic and Databricks, including advanced detection implementation - Familiarity with Windows, Unix, and Linux systems - Experience with threat intelligence platforms (e.g., Anomali, Cybersixgill) Soft skills / other: - Strong verbal and written communication skills - Demonstrated ability to work across global time zones (U.S. East, India and Ireland teams) - Strong project management, problem-solving, and decision-making skills - Ability to lead during high-pressure cybersecurity incidents and guide team response We could put all under Skills, but better to split: Requirements (experience), Qualifications (education), Skills (technical + soft). That seems reasonable. Benefits: list from "What You’ll Get From Us": - A team where you can voice your opinion, make an impact, and where you and your experience are valued. - Internal mobility – there are opportunities for cross training and the ability to attain your next career step within Barracuda. - Equity, in the form of non-qualifying options - High-quality health benefits - Retirement Plan with employer match - Career-growth opportunities - Flexible Time Off and Paid Time Off benefits - Volunteer opportunities We need to output as

  • . Now, ensure we don't include boilerplate like EEO, etc. Already removed. Now produce HTML fragment:

    About the role

    ... (the paragraph)

    Responsibilities

    • ... each bullet
    ...

    Requirements

    • 6+ years in security operations, detection engineering and offensive security
    • 2-3 years in leadership experience managing high-performing cybersecurity teams
    • 3–4 years of hands-on experience with Python and SQL
    • Experience with Kali and other pentesting/hacking tools
    • Developed and managed lab environments for attack and defend exercises

    Qualifications

    • Bachelor’s or master's degree in Cybersecurity, Information Security, or related field.

    Skills

    • Strong understanding of cloud platforms (AWS, Azure, GCP)
    • Experience with SIEMs like Elastic and Databricks, including advanced detection implementation
    • Familiarity with Windows, Unix, and Linux systems
    • Experience with threat intelligence platforms (e.g., Anomali, Cybersixgill)
    • Strong verbal and written communication skills
    • Demonstrated ability to work across global time zones (U.S. East, India and Ireland teams)
    • Strong project management, problem-solving, and decision-making skills
    • Ability to lead during high-pressure cybersecurity incidents and guide team response

    Benefits

    • A team where you can voice your opinion, make an impact, and where you and your experience are valued.
    • Internal mobility – there are opportunities for cross training and the ability to attain your next career step within Barracuda.
    • Equity, in the form of non-qualifying options
    • High-quality health benefits
    • Retirement Plan with employer match
    • Career-growth opportunities
    • Flexible Time Off and Paid Time Off benefits
    • Volunteer opportunities
    We should not include Pay or Schedule sections. Check that we didn't repeat job title. Good. Check that we preserved all substantive info: Did we miss any? Let's review original text for any other details not captured. Original includes: "Barracuda is a leading cybersecurity company providing complete protection against complex threats. Our platform protects email, data, applications, and networks with innovative solutions, and a managed XDR service, to strengthen cyber resilience. Hundreds of thousands of IT professionals and managed service providers worldwide trust us to protect and support them with solutions that are easy to buy, deploy, and use. We know a diverse workforce adds to our collective value and strength as an organization. Barracuda Networks is proud to be an Equal Opportunity Employer, committed to equal employment opportunity and equitable compensation regardless of race, gender, religion, sex, sexual orientation, national origin, or disability." This is boilerplate EEO/diversity statement; we should remove as per instruction: remove EEO/equal-opportunity boilerplate. So we can drop that. Also "Envision Yourself at Barracuda" we incorporated into About the role? We didn't include that phrase explicitly. It's just a heading; we can drop it as it's not substantive beyond the role description.