Description
Role Purpose
This role is built for a technical leader who can orchestrate and scale high-concurrency red team engagements, managing multiple distinct victim operations simultaneously. The Director ensures the continuous development of sophisticated custom malware and resilient Command and Control (C2) architecture, while serving as the primary operational coordinator who translates active attack campaigns into clear, actionable risk insights for diverse stakeholder groups.
Key Responsibilities
High-Concurrency Operational Management
- Directly manage multiple offensive teams executing simultaneous, distinct victim operations across separate target networks or business entities.
- De-conflict operational resources, timelines, and personnel to ensure high-fidelity, continuous testing across multiple concurrent environments.
- Handle the inherent ambiguity of shifting variables across multiple live runs, ensuring every operation maintains rigid operational security (OPSEC).
C2 Architecture & Advanced Malware Development
- Oversee the design, deployment, and operational management of complex Command and Control (C2) frameworks capable of supporting multi-tenant, simultaneous operations.
- Enforce best practices in C2 server segregation, obfuscation, and traffic routing to prevent defensive detection across various target environments.
- Drive the engineering lifecycle for custom, evasive malware and custom tooling to ensure operations bypass modern enterprise controls (EDR/NDR).
Threat-Aligned Operation Execution
- Maintain an expert, up-to-the-minute understanding of real-world threat actor behaviors, actively applying global threat intelligence to live operational scenarios.
- Ensure that simultaneous red team campaigns realistically mimic the specific Tactics, Techniques, and Procedures (TTPs) of modern Advanced Persistent Threats (APTs) targeting the respective victims.
Stakeholder Interface & Operational Coordination
- Act as the primary interface for all affected stakeholders, providing regular, precise updates on active exploitation paths and findings during live runs.
- Coordinate complex, multi-stakeholder rating exercises, ensuring seamless collaboration and communication before, during, and after a specific operational run.
- Translate highly technical, multi-stage attack paths into risk-based executive briefings for non-technical leadership.
Job Requirements
Technical Experience & Qualifications
- Multi-Team Operational Leadership: Proven experience directly managing multiple technical offensive units or red teams, with a track record of executing concurrent attack campaigns.
- Live Operations Mastery: Expert-level knowledge in running routine, high-velocity red team operations, including post-exploitation, lateral movement, and data exfiltration.
- Malware & C2 Infrastructure Engineering: Deep technical background in developing custom malware and managing robust C2 server environments tailored for stealth and resilience.
- Threat Landscapes: Mastery of modern adversarial TTPs and a precise understanding of what real-world threat actors are currently exploiting in the wild.
Soft Skills & Core Competencies
- Stakeholder Diplomacy: Outstanding capability to interface with, update, and manage expectations across a wide array of stakeholders during high-stakes operational runs.
- Crisis & Ambiguity Management: Calm under pressure; able to switch contexts rapidly between multiple live victim operations and make split-second operational decisions.
- Clear Articulation: Ability to synthesize complex technical execution chains into concise, impactful operational reports and executive summaries.
Cultivating Technical Camaraderie & Shared Team Spirit
- Culture & Team Builder: Proven ability to build camaraderie and high esprit de corps among eccentric, highly specialized technical professionals, transforming isolated experts into a cohesive, mission-driven unit.
- Forge a Collaborative "Crew" Identity: Cultivate a tight-knit, high-trust team culture where multi-team silos are broken down. Encourage a collaborative environment where vulnerability researchers and red team operators actively swap insights, techniques, and tools to win operations together.
- Drive Shared Technical Victories: Build deep team spirit by establishing peer-review structures, collaborative hackathons, and collective post-operation debriefs. Ensure that a breakthrough by one operator (e.g., a novel C2 bypass or custom malware variant) is celebrated and adopted as a collective win for the entire unit.
- Foster an Environment of Mutual Respect: Lead with the technical credibility required to earn the respect of deeply analytical engineers, creating a flat, open culture where the best technical argument wins, regardless of hierarchy.
- Unite Around a Common Adversary: Foster high morale and collective purpose by aligning the team against a clear, shared mission—outsmarting real-world threat actors and securing complex ecosystems through elite, unified offensive tradecraft.
Similar jobs
[What the role is] GovTech is the lead agency driving Singapore’s Smart Nation initiatives and public sector digital transformation. As the Centre of Excellence for Infocomm Technology and Smart Systems (ICT & SS), G…
GovTech is the lead agency driving Singapore’s Smart Nation initiatives and public sector digital transformation. As the Centre of Excellence for Infocomm Technology and Smart Systems (ICT & SS), GovTech develops the…
The Government Technology Agency (GovTech) is the lead agency driving Singapore’s Smart Nation initiatives and public sector digital transformation. As the Centre of Excellence for Infocomm Technology and Smart Systems (…
[What the role is] GovTech is the lead agency driving Singapore’s Smart Nation initiatives and public
GovTech is the lead agency driving Singapore’s Smart Nation initiatives and public sector digital transformation. As the Centre of Excellence for Infocomm Technology and Smart Systems (ICT & SS), GovTech develops the…
Est. 250,000 USD
About the Role: PubMatic is seeking a Director of Information Security to lead and evolve our global security program across enterprise infrastructure, cloud platforms, products, corporate systems, and emerging AI techno…
Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them become…
Est. 120,000 EUR
We are looking for a Cyber Defense Manager to lead, mature, and operate our resilient security operations capability. In this role, you will own the defense of our environment, ensuring fast and precise threat detection,…
Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them become…
Est. 120,000 USD
Most companies claim to have the best people. We say to them, "Keep dreaming." Our people are second to none. They set us apart with their entrepreneurial spirit and ambition. They come to us from the likes of Amazon, Mi…
Position Overview We are seeking a Product Manager (formerly Business Analyst also would be considered) to drive user engagement and stakeholder management for our cybersecurity solutions, working closely with the lead P…
Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of Saving Lives with Data. Together, we power breakthrough med…
GovTech is the lead agency driving Singapore’s Smart Nation initiatives and public sector digital transformation. As the Centre of Excellence for Infocomm Technology and Smart Systems (ICT & SS), GovTech develops the…
Est. 140,000 USD
SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this poss…
Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of Saving Lives with Data. Together, we power breakthrough med…
Est. 140,000 USD
SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this poss…
Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of Saving Lives with Data. Together, we power breakthrough med…
Est. 125,000 USD
SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this poss…
Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them become…
Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them become…
Est. 115,000 USD
Join our team at Core One! Our mission is to be at the forefront of devising analytical, operational and technical solutions to our Nation's most complex national security challenges. In order to achieve our mission, Cor…
Job Description Summary The Government Technology Agency (GOVTECH) aims to transform the delivery of Government digital services by taking an "outside-in" view, putting citizens and businesses at the heart of everything…
Est. 120,000 USD
SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this poss…
GovTech supports various Government Agencies in carrying out ICT delivery services and appoints Agency Chief Information Security Officers (ACISO) to oversee information security management within these agencies. The ACI…
Est. 195,000 USD
Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them become…
About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to…
Est. 96,000 USD
Join our team at Core One! Our mission is to be at the forefront of devising analytical, operational and technical solutions to our Nation's most complex national security challenges. In order to achieve our mission, Cor…
Est. 200,000 USD
Welcome to the future of cloud networking and security! Cato Networks is the first company to converge enterprise networking and security into one centralized and global service that is delivered by cloud. It is led by n…
Est. 250,000 USD
Title: Chief Information Security Officer (CISO) Location: Morristown, NJ / Austin, TX(hybrid) Reports To: Chief Technology Officer About Hippo: Hippo was built on a promise: make homeownership effortless. Nearly a decad…
Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them become…