Lead Manager – Information Security

Responsibilities

1. Conduct authorized red teaming exercises that emulate threat actors targeting enterprise environments, cloud, identity, endpoints, applications, and networks.

2. Simulate realistic attack scenarios.

3. Assess the effectiveness of preventive and detective controls

4. Evaluate blue team / SOC readiness against simulated attacks.

5. Identify exploitable weaknesses in systems, applications, identities, and configurations.

6. Perform controlled exploitation only within approved scope.

7. Prioritize issues based on attack feasibility and business impact.

8. Map attack paths that an adversary could use to reach critical assets. Test the scenarios based on business impact driven objectives.

9. Work closely with Incident Response, Detection Engineering, and Platform teams to improve defensive capabilities.

10. Support purple team exercises to tune detections and strengthen response playbooks.

11. Improve internal methodologies, playbooks, and automation for red team operations

12. Manager ensures flow of information required between team members happens

13. Define the responsibilities of the team members and their interdependencies.

Technical and Professional Requirements

1. Red Team tools: Kali Linux, Cobalt Strike, Metasploit,

Empire, Sliver, BloodHound

2. Strong understanding of Windows/Linux internals, AD,

identity attacks

3. Scripting: Python, PowerShell, Bash

4. Certifications preferred: OSCP, CRTO, CEH, GWAPT

5. Reporting and risk communication skills

Preferred Skills

• SOC Operations

Educational Requirements

Bachelor of Engineering