AOUSC - Threat Emulation & Readiness Lead / Red Team Lead

Position Title Threat Emulation & Readiness Lead / Red Team Lead Position Overview The Threat Emulation & Readiness Lead will oversee adversary emulation, red team operations, cyber readiness exercises, and threat-informed defense initiatives supporting a federal enterprise cybersecurity program.

The Lead will direct realistic adversary simulation activities aligned to nation-state tradecraft and MITRE ATT&CK methodologies to assess and improve organizational detection, response, resilience, and operational readiness.

Key Responsibilities Lead red team operations and adversary emulation exercises.

Design and execute:

• threat emulation campaigns, purple team exercises, tabletop exercises, crisis simulations, and readiness drills.
• Emulate advanced threat actor TTPs targeting enterprise, cloud, identity, and hybrid environments.

Develop attack chains aligned to:

• MITRE ATT&CK, intelligence reporting, and real-world threat actor behaviors.
• Coordinate closely with SOC, CTI, Threat Hunt, and Detection Engineering teams.
• Assess detection and response effectiveness across defensive technologies and operational workflows.
• Develop after-action reports, findings, remediation recommendations, and improvement roadmaps.
• Lead operational readiness assessments and continuous improvement initiatives.
• Brief executives and operational leadership on adversary risk and organizational readiness.
• Required Qualifications 10+ years of offensive security or advanced cybersecurity operations experience. 5+ years leading red team or adversary emulation operations.

Experience conducting operations against:

• enterprise Active Directory environments, cloud infrastructure, hybrid identity systems, and modern endpoint defenses.

Deep understanding of:

• adversary tradecraft, post-exploitation, detection evasion, persistence, and lateral movement techniques.
• Experience conducting purple team engagements and readiness exercises.
• Strong executive communication and briefing capabilities.
• Preferred Certifications OSCP OSEP CRTO GXPN GPEN CISSP MITRE ATT&CK certifications Powered by JazzHR