Deputy Director, Offensive Security

Role Purpose

This role is built for a technical leader who can orchestrate and scale high-concurrency red team engagements, managing multiple distinct victim operations simultaneously. The Director ensures the continuous development of sophisticated custom malware and resilient Command and Control (C2) architecture, while serving as the primary operational coordinator who translates active attack campaigns into clear, actionable risk insights for diverse stakeholder groups.

Key ResponsibilitiesHigh-Concurrency Operational Management

• Directly manage multiple offensive teams executing simultaneous, distinct victim operations across separate target networks or business entities.

• De-conflict operational resources, timelines, and personnel to ensure high-fidelity, continuous testing across multiple concurrent environments.

• Handle the inherent ambiguity of shifting variables across multiple live runs, ensuring every operation maintains rigid operational security (OPSEC).

C2 Architecture & Advanced Malware Development

• Oversee the design, deployment, and operational management of complex Command and Control (C2) frameworks capable of supporting multi-tenant, simultaneous operations.

• Enforce best practices in C2 server segregation, obfuscation, and traffic routing to prevent defensive detection across various target environments.

• Drive the engineering lifecycle for custom, evasive malware and custom tooling to ensure operations bypass modern enterprise controls (EDR/NDR).

Threat-Aligned Operation Execution

• Maintain an expert, up-to-the-minute understanding of real-world threat actor behaviors, actively applying global threat intelligence to live operational scenarios.

• Ensure that simultaneous red team campaigns realistically mimic the specific Tactics, Techniques, and Procedures (TTPs) of modern Advanced Persistent Threats (APTs) targeting the respective victims.

Stakeholder Interface & Operational Coordination

• Act as the primary interface for all affected stakeholders, providing regular, precise updates on active exploitation paths and findings during live runs.

• Coordinate complex, multi-stakeholder rating exercises, ensuring seamless collaboration and communication before, during, and after a specific operational run.

• Translate highly technical, multi-stage attack paths into risk-based executive briefings for non-technical leadership.

Job Requirements

Technical Experience & Qualifications

• Multi-Team Operational Leadership: Proven experience directly managing multiple technical offensive units or red teams, with a track record of executing concurrent attack campaigns.