AOUSC - Threat Emulation & Readiness Lead / Red Team Lead

**Position Title** Threat Emulation & Readiness Lead / Red Team Lead **Position Overview** The Threat Emulation & Readiness Lead will oversee adversary emulation, red team operations, cyber readiness exercises, and threat-informed defense initiatives supporting a federal enterprise cybersecurity program. The Lead will direct realistic adversary simulation activities aligned to nation-state tradecraft and MITRE ATT&CK methodologies to assess and improve organizational detection, response, resilience, and operational readiness. **Key Responsibilities** - Lead red team operations and adversary emulation exercises. - Design and execute: - threat emulation campaigns, - purple team exercises, - tabletop exercises, - crisis simulations, - and readiness drills. - Emulate advanced threat actor TTPs targeting enterprise, cloud, identity, and hybrid environments. - Develop attack chains aligned to: - MITRE ATT&CK, - intelligence reporting, - and real-world threat actor behaviors. - Coordinate closely with SOC, CTI, Threat Hunt, and Detection Engineering teams. - Assess detection and response effectiveness across defensive technologies and operational workflows. - Develop after-action reports, findings, remediation recommendations, and improvement roadmaps. - Lead operational readiness assessments and continuous improvement initiatives. - Brief executives and operational leadership on adversary risk and organizational readiness. **Required Qualifications** - 10+ years of offensive security or advanced cybersecurity operations experience. - 5+ years leading red team or adversary emulation operations. - Experience conducting operations against: - enterprise Active Directory environments, - cloud infrastructure, - hybrid identity systems, - and modern endpoint defenses. - Deep understanding of: - adversary tradecraft, - post-exploitation, - detection evasion, - persistence, - and lateral movement techniques. - Experience conducting purple team engagements and readiness exercises. - Strong executive communication and briefing capabilities. **Preferred Certifications** - OSCP - OSEP - CRTO - GXPN - GPEN - CISSP - MITRE ATT&CK certifications