AOUSC Threat Emulation & Readiness Lead Red Team Lead
Washington, AR - USA
Job Summary
Position Title
Threat Emulation & Readiness Lead / Red Team Lead
Position Overview
The Threat Emulation & Readiness Lead will oversee adversary emulation red team operations cyber readiness exercises and threat-informed defense initiatives supporting a federal enterprise cybersecurity program.
The Lead will direct realistic adversary simulation activities aligned to nation-state tradecraft and MITRE ATT&CK methodologies to assess and improve organizational detection response resilience and operational readiness.
Key Responsibilities
Threat Emulation & Readiness Lead / Red Team Lead
Position Overview
The Threat Emulation & Readiness Lead will oversee adversary emulation red team operations cyber readiness exercises and threat-informed defense initiatives supporting a federal enterprise cybersecurity program.
The Lead will direct realistic adversary simulation activities aligned to nation-state tradecraft and MITRE ATT&CK methodologies to assess and improve organizational detection response resilience and operational readiness.
Key Responsibilities
- Lead red team operations and adversary emulation exercises.
- Design and execute:
- threat emulation campaigns
- purple team exercises
- tabletop exercises
- crisis simulations
- and readiness drills.
- Emulate advanced threat actor TTPs targeting enterprise cloud identity and hybrid environments.
- Develop attack chains aligned to:
- MITRE ATT&CK
- intelligence reporting
- and real-world threat actor behaviors.
- Coordinate closely with SOC CTI Threat Hunt and Detection Engineering teams.
- Assess detection and response effectiveness across defensive technologies and operational workflows.
- Develop after-action reports findings remediation recommendations and improvement roadmaps.
- Lead operational readiness assessments and continuous improvement initiatives.
- Brief executives and operational leadership on adversary risk and organizational readiness.
- 10 years of offensive security or advanced cybersecurity operations experience.
- 5 years leading red team or adversary emulation operations.
- Experience conducting operations against:
- enterprise Active Directory environments
- cloud infrastructure
- hybrid identity systems
- and modern endpoint defenses.
- Deep understanding of:
- adversary tradecraft
- post-exploitation
- detection evasion
- persistence
- and lateral movement techniques.
- Experience conducting purple team engagements and readiness exercises.
- Strong executive communication and briefing capabilities.
- OSCP
- OSEP
- CRTO
- GXPN
- GPEN
- CISSP
- MITRE ATT&CK certifications
Required Experience:
Senior IC
About Company
Our exclusive ATO as a Service⢠software & expert services automate FISMA RMF & FedRAMP compliance.