Lead Manager - Information Security

1. Conduct authorized red teaming exercises that emulate threat actors targeting enterprise environments, cloud, identity, endpoints, applications, and networks.
2. Simulate realistic attack scenarios.
3. Assess the effectiveness of preventive and detective controls
4. Evaluate blue team / SOC readiness against simulated attacks.
5. Identify exploitable weaknesses in systems, applications, identities, and configurations.
6. Perform controlled exploitation only within approved scope.
7. Prioritize issues based on attack feasibility and business impact.
8. Map attack paths that an adversary could use to reach critical assets. Test the scenarios based on business impact driven objectives.
9. Work closely with Incident Response, Detection Engineering, and Platform teams to improve defensive capabilities.
10. Support purple team exercises to tune detections and strengthen response playbooks.
11. Improve internal methodologies, playbooks, and automation for red team operations
12. Manager ensures flow of information required between team members happens
13. Define the responsibilities of the team members and their interdependencies.

1. Red Team tools: Kali Linux, Cobalt Strike, Metasploit,
Empire, Sliver, BloodHound
2. Strong understanding of Windows/Linux internals, AD,
identity attacks
3. Scripting: Python, PowerShell, Bash
4. Certifications preferred: OSCP, CRTO, CEH, GWAPT
5. Reporting and risk communication skills

Responsible for simulating real-world adversary tactics, techniques, and procedures (TTPs) to test the
organization's ability to prevent and detect cyberattacks. This role helps identify security gaps in people,
processes, and technology by conducting controlled offensive security exercises in an authorized and ethical
manner.