Manager, Threat (Red Team)

What you'll do

• Design and execute adversary simulation exercises mapped to MITRE ATT&CK techniques and current threat intelligence.
• Conduct purple team exercises with SOC and detection engineering teams to identify and validate detection gaps.
• Simulate full attack chains including initial access, lateral movement, privilege escalation, persistence, and data exfiltration.
• Operate and optimize breach and attack simulation (BAS) platforms to provide continuous, automated validation of security controls.
• Design, deploy, and manage deception technologies such as honeypots, honeytokens, and decoy assets.
• Integrate deception alerts into SOC workflows to ensure timely triage and investigation of triggered events.
• Translate simulation findings into new detection rules, playbooks, and response procedures with the Detection Engineering team.
• Produce evidence-based reports on simulation results, detection coverage, and defensive gap trends for leadership.

What we're looking for

• Minimum 5 years of progressive cybersecurity experience focusing on adversary simulation, red teaming, purple teaming, or detection validation.
• Hands-on experience with breach and attack simulation platforms such as Mandiant Security Validation, AttackIQ, or SafeBreach.
• Strong working knowledge of adversary tradecraft and the MITRE ATT&CK framework to design realistic attack simulations.
• Experience with deception technologies, including honeypots, honeytokens, and decoy infrastructure design and deployment.
• Proficiency with offensive security tools and techniques including Cobalt Strike, Metasploit, and custom C2 frameworks.
• Strong understanding of SIEM, EDR, network monitoring, and detection engineering concepts to evaluate and remediate detection gaps.
• Bachelor's degree in Cybersecurity, Computer Science, Engineering, Information Systems, or a related technical field.
• Relevant certifications such as OSCP, GPEN, GCIH, GXPN, CRTO, or CRTL (preferred).