Cyber Defense - Adversary Emulation Director

A large global financial-services organization is seeking a Cyber Defense - Adversary Emulation Director to lead proactive security capabilities across vulnerability management, threat intelligence, threat hunting, penetration testing, and red and purple team operations.

This person will combine strategic program leadership with meaningful technical depth. The Director will identify and prioritize real-world threats, test enterprise defenses against realistic attacker techniques, improve detection capabilities, and work with engineering and technology teams to drive measurable remediation across infrastructure, applications, endpoints, networks, and cloud environments.

Responsibilities:

• Lead and mature enterprise vulnerability-management and proactive-security programs.
• Direct threat-intelligence activities focused on relevant threat actors, vulnerabilities, and attacker TTPs.
• Develop threat-hunting campaigns across endpoint, network, cloud, and security telemetry.
• Lead adversary-emulation, penetration-testing, red-team, and purple-team exercises.
• Translate offensive-security findings into actionable remediation plans.
• Partner with security operations, engineering, infrastructure, application, and incident-response teams.
• Establish program metrics, governance, operating standards, and repeatable workflows.
• Apply automation and AI-assisted capabilities where they can improve analyst efficiency and security outcomes.

Role Requirements:

• 10+ years of information-security or cybersecurity experience.
• Significant experience across proactive or offensive security disciplines.
• Proven ownership of red-team, purple-team, adversary-emulation, or penetration-testing initiatives.
• Strong enterprise vulnerability-management experience.
• Threat-intelligence and threat-hunting experience.
• Knowledge of MITRE ATT&CK and threat-informed defense.
• Hands-on scripting or automation experience using Python, PowerShell, or similar technologies.
• Experience with SIEM, EDR/XDR, vulnerability, threat-intelligence, and offensive-security platforms.
• Ability to translate highly technical security findings for engineering and business stakeholders.
• Experience establishing security processes, standards, governance, and remediation programs.

Nice to Have:

• Financial-services or other regulated-industry experience.
• Cloud and application-security experience.
• Detection-engineering and SOAR experience.
• Exposure to AI/LLM-assisted cybersecurity workflows.
• Relevant advanced security certifications.