AOUSC - Threat Emulation & Readiness Lead / Red Team Lead
cFocus Software Incorporated · cfocussoftware.com
United StatesLead / Manager
The job in short
Red team and threat emulation leadership.
Cybersecurity
Details
- Found
- 21 d ago · posted 2026-07-15
- Location as listed
- Washington, DC
- Role
- Security Engineer
- Source
- The company’s own careers site
Full description
Position Title
Threat Emulation & Readiness Lead / Red Team Lead
Position Overview
The Threat Emulation & Readiness Lead will oversee adversary emulation, red team operations, cyber readiness exercises, and threat-informed defense initiatives supporting a federal enterprise cybersecurity program.
The Lead will direct realistic adversary simulation activities aligned to nation-state tradecraft and MITRE ATT&CK methodologies to assess and improve organizational detection, response, resilience, and operational readiness.
Key Responsibilities
• Lead red team operations and adversary emulation exercises.
• Design and execute:
• threat emulation campaigns,
• purple team exercises,
• tabletop exercises,
• crisis simulations,
• and readiness drills.
• Emulate advanced threat actor TTPs targeting enterprise, cloud, identity, and hybrid environments.
• Develop attack chains aligned to:
• MITRE ATT&CK,
• intelligence reporting,
• and real-world threat actor behaviors.
• Coordinate closely with SOC, CTI, Threat Hunt, and Detection Engineering teams.
• Assess detection and response effectiveness across defensive technologies and operational workflows.
• Develop after-action reports, findings, remediation recommendations, and improvement roadmaps.
• Lead operational readiness assessments and continuous improvement initiatives.
• Brief executives and operational leadership on adversary risk and organizational readiness.
Required Qualifications
• 10+ years of offensive security or advanced cybersecurity operations experience.
• 5+ years leading red team or adversary emulation operations.
• Experience conducting operations against:
• enterprise Active Directory environments,
• cloud infrastructure,
• hybrid identity systems,
• and modern endpoint defenses.
• Deep understanding of:
• adversary tradecraft,
• post-exploitation,
• detection evasion,
• persistence,
• and lateral movement techniques.
• Experience conducting purple team engagements and readiness exercises.
• Strong executive communication and briefing capabilities.
Preferred Certifications
• OSCP
• OSEP
• CRTO
• GXPN
• GPEN
• CISSP
• MITRE ATT&CK certifications
Security Engineer jobs in the United States · All cFocus Software Incorporated jobs