Government Careers

  • AOUSC - Threat Emulation & Readiness Lead / Red Team Lead

  • cFocus Software Incorporated
  • Washington, DC 20011 United States View Map

Summary

Position Title
Threat Emulation & Readiness Lead / Red Team Lead
Position Overview
The Threat Emulation & Readiness Lead will oversee adversary emulation, red team operations, cyber readiness exercises, and threat-informed defense initiatives supporting a federal enterprise cybersecurity program.
The Lead will direct realistic adversary simulation activities aligned to nation-state tradecraft and MITRE ATT&CK methodologies to assess and improve organizational detection, response, resilience, and operational readiness.
Key Responsibilities
  • Lead red team operations and adversary emulation exercises.
  • Design and execute:
    • threat emulation campaigns,
    • purple team exercises,
    • tabletop exercises,
    • crisis simulations,
    • and readiness drills.
  • Emulate advanced threat actor TTPs targeting enterprise, cloud, identity, and hybrid environments.
  • Develop attack chains aligned to:
    • MITRE ATT&CK,
    • intelligence reporting,
    • and real-world threat actor behaviors.
  • Coordinate closely with SOC, CTI, Threat Hunt, and Detection Engineering teams.
  • Assess detection and response effectiveness across defensive technologies and operational workflows.
  • Develop after-action reports, findings, remediation recommendations, and improvement roadmaps.
  • Lead operational readiness assessments and continuous improvement initiatives.
  • Brief executives and operational leadership on adversary risk and organizational readiness.
Required Qualifications
  • 10+ years of offensive security or advanced cybersecurity operations experience.
  • 5+ years leading red team or adversary emulation operations.
  • Experience conducting operations against:
    • enterprise Active Directory environments,
    • cloud infrastructure,
    • hybrid identity systems,
    • and modern endpoint defenses.
  • Deep understanding of:
    • adversary tradecraft,
    • post-exploitation,
    • detection evasion,
    • persistence,
    • and lateral movement techniques.
  • Experience conducting purple team engagements and readiness exercises.
  • Strong executive communication and briefing capabilities.
Preferred Certifications
  • OSCP
  • OSEP
  • CRTO
  • GXPN
  • GPEN
  • CISSP
  • MITRE ATT&CK certifications

Powered by JazzHR

Job Description

Position Title
Threat Emulation & Readiness Lead / Red Team Lead
Position Overview
The Threat Emulation & Readiness Lead will oversee adversary emulation, red team operations, cyber readiness exercises, and threat-informed defense initiatives supporting a federal enterprise cybersecurity program.
The Lead will direct realistic adversary simulation activities aligned to nation-state tradecraft and MITRE ATT&CK methodologies to assess and improve organizational detection, response, resilience, and operational readiness.
Key Responsibilities
  • Lead red team operations and adversary emulation exercises.
  • Design and execute:
    • threat emulation campaigns,
    • purple team exercises,
    • tabletop exercises,
    • crisis simulations,
    • and readiness drills.
  • Emulate advanced threat actor TTPs targeting enterprise, cloud, identity, and hybrid environments.
  • Develop attack chains aligned to:
    • MITRE ATT&CK,
    • intelligence reporting,
    • and real-world threat actor behaviors.
  • Coordinate closely with SOC, CTI, Threat Hunt, and Detection Engineering teams.
  • Assess detection and response effectiveness across defensive technologies and operational workflows.
  • Develop after-action reports, findings, remediation recommendations, and improvement roadmaps.
  • Lead operational readiness assessments and continuous improvement initiatives.
  • Brief executives and operational leadership on adversary risk and organizational readiness.
Required Qualifications
  • 10+ years of offensive security or advanced cybersecurity operations experience.
  • 5+ years leading red team or adversary emulation operations.
  • Experience conducting operations against:
    • enterprise Active Directory environments,
    • cloud infrastructure,
    • hybrid identity systems,
    • and modern endpoint defenses.
  • Deep understanding of:
    • adversary tradecraft,
    • post-exploitation,
    • detection evasion,
    • persistence,
    • and lateral movement techniques.
  • Experience conducting purple team engagements and readiness exercises.
  • Strong executive communication and briefing capabilities.
Preferred Certifications
  • OSCP
  • OSEP
  • CRTO
  • GXPN
  • GPEN
  • CISSP
  • MITRE ATT&CK certifications

Powered by JazzHR

Government Careers

Government Careers

Government jobs offer stability, competitive benefits, and the chance to make a meaningful impact on your community and country.

Whether you’re starting your career or seeking new opportunities, these roles provide pathways for growth, security, and service.

Explore positions across a wide range of fields and take the first step toward a rewarding future in public service.

Show more
Apply Now

MORE JOBS

Show More