cFocus Software

Federal cybersecurity, cross-domain, geospatial IT services

Threat Emulation & Readiness Lead / Red Team Lead

Offensive Security & TestingConfirmed live in the last 24 hours

Full-timeWashington, DC, USANo salary listedIn-person

About the Job

Requirements

At least 10 years of offensive security or advanced cybersecurity operations experience.
At least 5 years leading red team or adversary emulation operations.
Experience conducting operations against enterprise Active Directory environments, cloud infrastructure, hybrid identity systems, and modern endpoint defenses.
Deep understanding of adversary tradecraft, post-exploitation, detection evasion, persistence, and lateral movement techniques.
Experience conducting purple team engagements and readiness exercises.
Strong executive communication and briefing capabilities.

Responsibilities

Lead red team operations and adversary emulation exercises.
Design and execute threat emulation campaigns, purple team exercises, tabletop exercises, crisis simulations, and readiness drills.
Emulate advanced threat actor tactics, techniques, and procedures targeting enterprise, cloud, identity, and hybrid environments.
Develop attack chains aligned to MITRE ATT&CK, intelligence reporting, and real-world threat actor behaviors.
Coordinate closely with security operations center, cyber threat intelligence, threat hunting, and detection engineering teams.
Assess detection and response effectiveness across defensive technologies and operational workflows.
Develop after-action reports, findings, remediation recommendations, and improvement roadmaps.
Lead operational readiness assessments and continuous improvement initiatives.
Brief executives and operational leadership on adversary risk and organizational readiness.

Desired Qualifications

Preferred certifications: OSCP, OSEP, CRTO, GXPN, GPEN, CISSP, and MITRE ATT&CK certifications.

Position Title
Threat Emulation & Readiness Lead / Red Team Lead
Position Overview
The Threat Emulation & Readiness Lead will oversee adversary emulation, red team operations, cyber readiness exercises, and threat-informed defense initiatives supporting a federal enterprise cybersecurity program.
The Lead will direct realistic adversary simulation activities aligned to nation-state tradecraft and MITRE ATT&CK methodologies to assess and improve organizational detection, response, resilience, and operational readiness.
Key Responsibilities

Lead red team operations and adversary emulation exercises.
Design and execute:
- threat emulation campaigns,
- purple team exercises,
- tabletop exercises,
- crisis simulations,
- and readiness drills.
Emulate advanced threat actor TTPs targeting enterprise, cloud, identity, and hybrid environments.
Develop attack chains aligned to:
- MITRE ATT&CK,
- intelligence reporting,
- and real-world threat actor behaviors.
Coordinate closely with SOC, CTI, Threat Hunt, and Detection Engineering teams.
Assess detection and response effectiveness across defensive technologies and operational workflows.
Develop after-action reports, findings, remediation recommendations, and improvement roadmaps.
Lead operational readiness assessments and continuous improvement initiatives.
Brief executives and operational leadership on adversary risk and organizational readiness.

Required Qualifications

10+ years of offensive security or advanced cybersecurity operations experience.
5+ years leading red team or adversary emulation operations.
Experience conducting operations against:
- enterprise Active Directory environments,
- cloud infrastructure,
- hybrid identity systems,
- and modern endpoint defenses.
Deep understanding of:
- adversary tradecraft,
- post-exploitation,
- detection evasion,
- persistence,
- and lateral movement techniques.
Experience conducting purple team engagements and readiness exercises.
Strong executive communication and briefing capabilities.

Preferred Certifications

OSCP
OSEP
CRTO
GXPN
GPEN
CISSP
MITRE ATT&CK certifications

About the Company

cFocus Software

Federal cybersecurity, cross-domain, geospatial IT services

cFocus Software provides cybersecurity, cross-domain, geospatial, and IT services to federal government agencies. It designs and manages security architectures, conducts risk assessments, ensures compliance, and delivers IT and geospatial data solutions tailored to federal requirements. The company differentiates itself through 18+ years of government-focused experience across dozens of agencies and established, government-facing delivery processes. Its goal is to help federal agencies protect, operate, and optimize their IT and geospatial capabilities for secure and compliant government operations.

Company size: 11-50
Company stage: Not listed
Total funding: Not listed
Headquarters: Largo, FL
Founded: 2006

Recently Posted Jobs

Explore more opportunities at cFocus Software

See more jobs