Overview
Cyber Threat Intel & Testing Lead (Red / Purple Team) based in Austin, TX. This is an enterprise role reporting to the Attack Surface Management Director. The role leads a team of analysts and security professionals focused on identifying, analyzing, and simulating cyber threats to proactively defend the organization
0an enterprise and manufacturing environments. The ideal candidate has a strong background in cyber threat intelligence, adversary emulation, and red / purple team operations, with proven leadership and communication skills.
Job Details
- Location : Austin, TX (onsite 4 days / week, 1 remote)
- Employment type : Full-time
- Seniority level : Mid-Senior level
- Industries : Retail and Manufacturing
Responsibilities
Lead and mentor a team of threat intelligence analysts and security testing professionals, fostering curiosity, rigor, and continuous improvement.Develop and execute strategies for threat intelligence gathering and security testing aligned with organizational risk management goals.Set performance goals, conduct regular reviews, and provide development plans for team members.Serve as the primary point of contact for threat intelligence and testing matters, communicating findings and recommendations to executive leadership and other stakeholders.Manage budgets for tools, training, and resources related to threat intelligence and testing operations.Oversee the collection, analysis, and dissemination of tactical, operational, and strategic threat intelligence.Maintain and evolve the threat intelligence platform (e.g., Anomali, MISP, TIP integrations).Enrich detection and response efforts through intelligence-led insights.Lead internal and external penetration testing, purple team engagements, and threat emulation exercises.Drive continuous control validation initiatives (e.g., MITRE ATT&CK alignment, breach simulation).Collaborate with detection engineers and SOC to convert threat intelligence into actionable detections.Guide hypothesis-driven threat hunts based on current intelligence and adversary behaviors.Maintain a technical understanding of adversary TTPs, attack surface management, and risk-based prioritization.Collaborate with detection engineering, SOC, and incident response teams to align intelligence and testing with operational needs.Partner with IT, OT, and business units to ensure threat intelligence and testing activities support enterprise and industrial environments.Communicate threat trends, testing outcomes, and risk insights effectively to both technical and executive stakeholders.Ensure intelligence and testing practices support compliance with internal policies and external regulatory requirements.Qualifications
Bachelor0s or Master
0s degree in Cybersecurity, Intelligence Studies, or related field
Solid experience in threat intelligence, red / purple teaming, or adversary emulationExtensive experience in cyber threat intelligence lifecycle management, including collection, analysis, dissemination, and operationalizationSkilled in profiling threat actors, mapping TTPs to MITREProficient in designing and executing red and purple team exercises using tools like Cobalt Strike, Caldera, and Atomic Red TeamStrong understanding of threat intelligence platforms, STIX / TAXII protocols, and integration with SIEM / SOARExperienced in adversary emulation, control validation, and threat-informed defense strategies across IT and OT environmentsEffective at translating threat intelligence into detection logic, hunting hypotheses, and executive-level risk narrativesProven ability to lead cross-functional testing initiatives and influence detection and response strategies through intelligence insightsFamiliar with regulatory and compliance frameworks (e.g., NIST, ISO, CMMC) and their intersection with threat intelligence programsStrong knowledge of threat actor profiling, TTP mapping, and intelligence lifecycle managementExperience with threat intelligence platforms (TIPs), STIX / TAXII, and integrating intelligence into SOC and IR workflowsProficiency in designing and executing red / purple team exercises, including use of tools like Cobalt Strike, Caldera, or Atomic Red TeamFamiliarity with control validation frameworks (e.g., MITRE Evaluations, CARTA, client tools)Strong communication and reporting skills to translate technical findings into business risk languageCertifications such as GCTI, CTIA, OSCP, or CRTO are highly valued#J-18808-Ljbffr