Director, Red Team

Cencora•Carrollton, TX

About The Position

The Director of Red Team is a senior cybersecurity leadership role responsible for directing offensive security operations, managing the internal red team, and overseeing external vendor engagements for advanced adversary simulations and security assessments. This position sits at the intersection of technical offensive expertise, strategic planning, and operational leadership. The ideal candidate will build, empower, and guide highly skilled offensive security analysts while establishing partnerships across technology and operational business teams to scale testing capabilities and mature security posture across complex enterprise environments.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or equivalent work experience
8+ years of progressive experience in cybersecurity, with at least 6 years dedicated to offensive security role in red team, penetration testing, adversary emulation, or exploit development.
3+ years leading offensive security teams or programs, with demonstrated success building and maturing the function at enterprise scale.
Demonstrated experience planning and leading full-scope, objective-based red team operations against mature, monitored environments.
Strong command of adversary tradecraft and the detection surfaces it creates, including how modern EDR, identity protection, and cloud logging observe attacker activity.
Practical fluency with MITRE ATT&CK and threat intelligence, and the ability to translate actor behavior into realistic emulation plans.
Excellent written and verbal communication skills, with proven ability to deliver difficult findings without damaging partnership, and to brief executives credibly.
Bachelor’s degree in cyber security, computer science, information technology, information systems, or a related field, or equivalent experience required.
10+ years of experience in cyber threat intelligence, cyber security, security operations, incident response, threat analysis, or a related field required.
5+ years of experience in a management capacity required.

Nice To Haves

OSCP — Offensive Security Certified Professional
OSEP — Experienced Penetration Tester
OSED — Exploit Developer
GIAC GXPN — Exploit Researcher and Advanced Penetration Tester
GIAC GPEN — Penetration Tester
GIAC GRTP — Red Team Professional
GIAC GCPN — Cloud Penetration Tester
GIAC GWAPT — Web Application Penetration Tester
Master's degree in cyber security, computer science, information technology, information systems, business administration, or a related field, or equivalent experience preferred.
Certified in Certified Information Systems Security Professional (CISSP) or equivalent certification preferred.
Certified in Certified Information Security Manager (CISM) or equivalent certification preferred.

Responsibilities

Manage and mature the Red Team strategy, aligning the overall vision and roadmap to business risks and posture.
Maintain and enforce clear Rules of Engagement, standard operating procedures, and safety controls to ensure adversary simulations test controls effectively without degrading production stability.
Align testing methodologies with threat intelligence frameworks to emulate threat actors and emerging tactics, techniques, and procedures relevant to business risk profiles.
Lead, mentor, and mature a team of high-performing red team engineers and offensive security operators, fostering continuous learning and skill development.
Balance team bandwidth between complex, long-term targeted campaigns, specialized security assessments, and research/tooling development.
Select and manage third-party offensive security providers for external assessments, scoping complex engagements and statement of work deliverables.
Validate that vendor findings maintain high technical standards and actionable quality.
Integrate third-party findings into internal tracking mechanisms to ensure unified reporting and remediation.
Partner closely with detection & response operations, threat intelligence, and security engineering to ensure red team findings drive tangible improvements in preventative and detective controls.
Translate complex exploit chains and tactical findings into clear risk impact narratives for executive leadership and business unit leaders.