Vulnerability & Red Team Lead

Role overview Lead an enterprise vulnerability management and offensive security program covering a large endpoint environment. The work combines continuous vulnerability scanning and remediation validation with penetration testing and red and purple team exercises. You will guide a technical team and turn offensive findings into practical improvements to security operations.

Responsibilities - Run vulnerability scanning, risk prioritization, remediation tracking, and retesting to confirm fixes. - Track known exploited vulnerabilities against applicable federal requirements and drive timely remediation. - Scope, conduct, and report penetration tests under formal rules of engagement. - Lead red and purple team exercises to assess detection and response capabilities. - Set vulnerability management policies, procedures, and performance measures. - Mentor analysts and testers, brief leaders on risk and findings, and coordinate follow-up with security operations and threat intelligence teams.

Requirements - At least 7 years of experience in penetration testing, vulnerability management, or both. - Bachelor’s degree in computer science, cybersecurity, or a related discipline; equivalent experience may be considered. - Strong knowledge of exploitation methods, scanning tools, and remediation validation. - Experience leading or mentoring technical staff. - OSCP, OSCE, or GIAC GXPN certification.

Nice to have - CISSP or GPEN certification.