Information Security Manager Jobs

Design, build, and lead a Cyber Threat Emulation and Red Team to create a program to identify, test, and drive mitigation efforts to reduce potential cyber attacks. These services include, but are not limited to, Red and Purple Teaming, Penetration Testing, proactive Ethical Hacking of applications and infrastructure.

Responsibilities:

• Build and lead an expert team that supports multiple Threat Emulation and Red Team services and initiatives across IT and OT environments
• Develop and implement a roadmap to define short- and long-term strategies as well as detailed activities for the team
• Work with other departments to Identify key performance gaps and focus areas, develop performance benchmarks, select, recommend and manage related cyber security projects, technologies, and vendors to ensure that service delivery and support meet performance and business objectives
• Anticipate trends, situations, and/or changing threat landscape conditions and coordinate with the broader cyber security and infrastructure teams to take appropriate actions on both an immediate need and planned regularly scheduled cadence as needed

Qualifications:

• 3+ years of experience building and leading a team that is responsible for the design, deployment, and operationalizing of a Threat Emulation and Red Team Program
• Strong understanding of cybersecurity principles
• Experience and proficiency in developing effective and innovative Ethical Hacking capabilities
• Strong working knowledge of various Threat Emulation and Red Team disciplines and services ( IT and OT) is preferred
• Experience and proficiency in scheduling coordinating and reporting Compromise Assessment and Penetration Testing internal and external engagements
• Experience and proficiency in developing and running day-to-day operations for mature Red, and Purple Team capabilities
• 8-12+ years of Information Security experience
• Cyber security experience and proficiency in cloud, API's, infrastructure layers, hardware, OS, virtualization, storage, network, database and other related systems and technologies, information security risk and vulnerability remediation, reverse engineering, automation and scripting, network monitoring, malware protection and analysis, intrusion detection and SIEM systems