Lead Manager - Information Security

Educational Requirements Bachelor of Engineering Service Line Information Security Group Responsibilities Conduct authorized red teaming exercises that emulate threat actors targeting enterprise environments, cloud, identity, endpoints, applications, and networks. Simulate realistic attack scenarios. Assess the effectiveness of preventive and detective controls Evaluate blue team / SOC readiness against simulated attacks. Identify exploitable weaknesses in systems, applications, identities, and configurations. Perform controlled exploitation only within approved scope. Prioritize issues based on attack feasibility and business impact. Map attack paths that an adversary could use to reach critical assets. Test the scenarios based on business impact driven objectives. Work closely with Incident Response, Detection Engineering, and Platform teams to improve defensive capabilities. Support purple team exercises to tune detections and strengthen response playbooks. Improve internal methodologies, playbooks, and automation for red team operations Manager ensures flow of information required between team members happens Define the responsibilities of the team members and their interdependencies. Technical and Professional Requirements: Red Team tools: Kali Linux, Cobalt Strike, Metasploit, Empire, Sliver, BloodHound Strong understanding of Windows/Linux internals, AD, identity attacks Scripting: Python, PowerShell, Bash Certifications preferred: OSCP, CRTO, CEH, GWAPT Reporting and risk communication skills Preferred Skills: Technology->Infrastructure Security->SOC Operations