Lead Manager - Information Security

Responsible for simulating real-world adversary tactics, techniques, and procedures (TTPs) to test the
organization’s ability to prevent and detect cyberattacks. This role helps identify security gaps in people,
processes, and technology by conducting controlled offensive security exercises in an authorized and ethical
manner.

1. Conduct authorized red teaming exercises that emulate threat actors targeting enterprise environments, cloud, identity, endpoints, applications, and networks.

2. Simulate realistic attack scenarios.

3. Assess the effectiveness of preventive and detective controls

4. Evaluate blue team / SOC readiness against simulated attacks.

5. Identify exploitable weaknesses in systems, applications, identities, and configurations.

6. Perform controlled exploitation only within approved scope.

7. Prioritize issues based on attack feasibility and business impact.

8. Map attack paths that an adversary could use to reach critical assets. Test the scenarios based on business impact driven objectives.

9. Work closely with Incident Response, Detection Engineering, and Platform teams to improve defensive capabilities.

10. Support purple team exercises to tune detections and strengthen response playbooks.

11. Improve internal methodologies, playbooks, and automation for red team operations

12. Manager ensures flow of information required between team members happens

13. Define the responsibilities of the team members and their interdependencies.

14. Red Team tools: Kali Linux, Cobalt Strike, Metasploit,
    Empire, Sliver, Blood Hound

15. Strong understanding of Windows/Linux internals, AD,
    identity attacks

16. Scripting: Python, PowerShell, Bash

17. Certifications preferred: OSCP, CRTO, CEH, GWAPT

18. Reporting and risk communication skills

Education: Bachelor of Engineering

Preferred skills: Technology->Infrastructure Security->SOC Operations