AOUSC - Threat Emulation & Readiness Lead / Red Team Lead

Position Title Threat Emulation & Readiness Lead / Red Team Lead Position Overview The Threat Emulation & Readiness Lead will oversee adversary emulation, red team operations, cyber readiness exercises, and threat-informed defense initiatives supporting a federal enterprise cybersecurity program. The Lead will direct realistic adversary simulation activities aligned to nation-state tradecraft and MITRE ATT&CK methodologies to assess and improve organizational detection, response, resilience, and operational readiness.

Key Responsibilities

• Lead red team operations and adversary emulation exercises.
• Design and execute:
• threat emulation campaigns,
• purple team exercises,
• tabletop exercises,
• crisis simulations,
• and readiness drills.
• Emulate advanced threat actor TTPs targeting enterprise, cloud, identity, and hybrid environments.
• Develop attack chains aligned to:
• MITRE ATT&CK,
• intelligence reporting,
• and real-world threat actor behaviors.
• Coordinate closely with SOC, CTI, Threat Hunt, and Detection Engineering teams.
• Assess detection and response effectiveness across defensive technologies and operational workflows.
• Develop after-action reports, findings, remediation recommendations, and improvement roadmaps.
• Lead operational readiness assessments and continuous improvement initiatives.
• Brief executives and operational leadership on adversary risk and organizational readiness.

Required Qualifications

• 10+ years of offensive security or advanced cybersecurity operations experience.
• 5+ years leading red team or adversary emulation operations.
• Experience conducting operations against:
• enterprise Active Directory environments,
• cloud infrastructure,
• hybrid identity systems,
• and modern endpoint defenses.
• Deep understanding of:
• adversary tradecraft,
• post-exploitation,
• detection evasion,
• persistence,
• and lateral movement techniques.
• Experience conducting purple team engagements and readiness exercises.
• Strong executive communication and briefing capabilities.

Preferred Certifications

• OSCP
• OSEP
• CRTO
• GXPN
• GPEN
• CISSP
• MITRE ATT&CK certifications