AOUSC - Threat Emulation & Readiness Lead / Red Team Lead

Summary

Position Title
Threat Emulation & Readiness Lead / Red Team Lead
Position Overview
The Threat Emulation & Readiness Lead will oversee adversary emulation, red team operations, cyber readiness exercises, and threat-informed defense initiatives supporting a federal enterprise cybersecurity program.
The Lead will direct realistic adversary simulation activities aligned to nation-state tradecraft and MITRE ATT&CK methodologies to assess and improve organizational detection, response, resilience, and operational readiness.
Key Responsibilities

• Lead red team operations and adversary emulation exercises.
• Design and execute:
  • threat emulation campaigns,
  • purple team exercises,
  • tabletop exercises,
  • crisis simulations,
  • and readiness drills.
• Emulate advanced threat actor TTPs targeting enterprise, cloud, identity, and hybrid environments.
• Develop attack chains aligned to:
  • MITRE ATT&CK,
  • intelligence reporting,
  • and real-world threat actor behaviors.
• Coordinate closely with SOC, CTI, Threat Hunt, and Detection Engineering teams.
• Assess detection and response effectiveness across defensive technologies and operational workflows.
• Develop after-action reports, findings, remediation recommendations, and improvement roadmaps.
• Lead operational readiness assessments and continuous improvement initiatives.
• Brief executives and operational leadership on adversary risk and organizational readiness.

Required Qualifications

• 10+ years of offensive security or advanced cybersecurity operations experience.
• 5+ years leading red team or adversary emulation operations.
• Experience conducting operations against:
  • enterprise Active Directory environments,
  • cloud infrastructure,
  • hybrid identity systems,
  • and modern endpoint defenses.
• Deep understanding of:
  • adversary tradecraft,
  • post-exploitation,
  • detection evasion,
  • persistence,
  • and lateral movement techniques.
• Experience conducting purple team engagements and readiness exercises.
• Strong executive communication and briefing capabilities.

Preferred Certifications

• OSCP
• OSEP
• CRTO
• GXPN
• GPEN
• CISSP
• MITRE ATT&CK certifications

Job Description

Position Title
Threat Emulation & Readiness Lead / Red Team Lead
Position Overview
The Threat Emulation & Readiness Lead will oversee adversary emulation, red team operations, cyber readiness exercises, and threat-informed defense initiatives supporting a federal enterprise cybersecurity program.
The Lead will direct realistic adversary simulation activities aligned to nation-state tradecraft and MITRE ATT&CK methodologies to assess and improve organizational detection, response, resilience, and operational readiness.
Key Responsibilities

• Lead red team operations and adversary emulation exercises.
• Design and execute:
  • threat emulation campaigns,
  • purple team exercises,
  • tabletop exercises,
  • crisis simulations,
  • and readiness drills.
• Emulate advanced threat actor TTPs targeting enterprise, cloud, identity, and hybrid environments.
• Develop attack chains aligned to:
  • MITRE ATT&CK,
  • intelligence reporting,
  • and real-world threat actor behaviors.
• Coordinate closely with SOC, CTI, Threat Hunt, and Detection Engineering teams.
• Assess detection and response effectiveness across defensive technologies and operational workflows.
• Develop after-action reports, findings, remediation recommendations, and improvement roadmaps.
• Lead operational readiness assessments and continuous improvement initiatives.
• Brief executives and operational leadership on adversary risk and organizational readiness.

Required Qualifications

• 10+ years of offensive security or advanced cybersecurity operations experience.
• 5+ years leading red team or adversary emulation operations.
• Experience conducting operations against:
  • enterprise Active Directory environments,
  • cloud infrastructure,
  • hybrid identity systems,
  • and modern endpoint defenses.
• Deep understanding of:
  • adversary tradecraft,
  • post-exploitation,
  • detection evasion,
  • persistence,
  • and lateral movement techniques.
• Experience conducting purple team engagements and readiness exercises.
• Strong executive communication and briefing capabilities.

Preferred Certifications

• OSCP
• OSEP
• CRTO
• GXPN
• GPEN
• CISSP
• MITRE ATT&CK certifications