Lead Offensive Security & Red Team

IDEMIA Secure Transactions, a division of IDEMIA Group, is the leading technology provider making it safer and easier to pay and connect. With unmatched expertise in cryptography and credential issuance, IST is trusted by over 2,000 financial institutions, mobile operators, automotive manufacturers, and IoT providers worldwide. Every day, IST secures billions of essential transactions, ensuring the highest levels of data protection and convenience.

Purpose

The Head of Offensive Security & Red Team leads the Company’s offensive security capabilities, including red teaming, penetration testing, adversary simulation, attack-path analysis, and continuous security validation across cloud, identity, applications, networks, data centers, and critical production environments.
This is a hands-on player-coach role combining technical leadership, capability building, and provider management. The role drives a threat-informed and proactive testing approach, translates offensive findings into measurable defensive improvements, and develops AI-enabled and agentic offensive security capabilities to increase testing speed, coverage, and depth while maintaining strong human oversight, safety, and governance.
The role reports to the VP IT Cybersecurity / CISO.

Key Missions

• Define and execute the Company’s offensive security strategy, annual testing plan, operating model, and capability roadmap.

• Lead red-team campaigns, adversary emulation, penetration testing, attack-path analysis, and security-control validation across cloud, on-premises, identity, applications, networks, data centers, and production environments.

• Prioritize offensive security activities based on business criticality, exposure, threat intelligence, technology changes, incidents, regulatory requirements, and emerging AI-enabled threats.

• Develop a continuous and automated testing model to complement periodic assessments and enable faster validation of vulnerabilities, attack paths, and defensive controls.

• Build and operationalize AI-assisted and agentic Red Team capabilities for reconnaissance, attack-hypothesis generation, attack-path discovery, adversary simulation, testing automation, controlled exploit validation, campaign orchestration, analysis, and reporting.

• Evaluate emerging AI-enabled offensive security technologies and determine where they can safely improve testing coverage, efficiency, and quality.

• Lead Purple Team activities with the Cybersecurity Defense Center and ensure offensive findings translate into improved detections, investigation procedures, SOC playbooks, vulnerability prioritization, architecture improvements, and stronger defensive controls.

• Define and maintain rules of engagement, authorization, safety controls, confidentiality requirements, escalation paths, and production safeguards for offensive activities.