Head of Offensive Security & Red Team (AI-Enabled)

IDEMIA; Paris; On-site; EUR 140,000 - 190,000; Full time

Job summary

IDEMIA is seeking a Head of Offensive Security & Red Team to lead aggressive security testing across cloud, on-premises, and production environments. The role combines hands-on execution with strategic leadership, capability building, and provider management.

You will drive threat-informed testing, translate findings into actionable risk reductions, and advance AI-assisted offensive security capabilities while maintaining governance and safety.

Qualifications

• 6-10 years of cybersecurity experience with hands-on offensive security, red teaming, or security research.
• Ability to scope, design, and execute complex offensive-security engagements from hypothesis to retesting.
• Strong depth in AD/Entra ID, cloud, applications/APIs, endpoints, or containers/Kubernetes.
• Knowledge of MITRE ATT&CK, attack-path analysis, privilege escalation, lateral movement, and detection-aware testing.
• Ability to develop and automate offensive-security capabilities using Python and other scripting languages.
• Experience with adversary-emulation tooling, labs, and testing automation.
• Interest or experience in AI-assisted security testing and agentic workflows.
• Ability to translate technical findings into business risk and communicate with stakeholders.

Responsibilities

• Define and execute offensive security strategy, testing plan, and capability roadmap.
• Lead red-team campaigns, adversary emulation, and security-control validation across environments.
• Prioritize activities based on business criticality, threats, and regulatory requirements.
• Develop automated testing to validate vulnerabilities, attack paths, and defenses.
• Build AI-assisted red team capabilities for reconnaissance, hypothesis generation, and testing automation.
• Evaluate emerging AI-enabled security tech for testing coverage and efficiency.
• Lead Purple Team activities to improve detections, playbooks, and risk prioritization.
• Define rules of engagement, safety controls, and production safeguards for offensive activities.
• Translate findings into business risk and drive remediation and retesting.
• Manage external pentesting providers and internalize repeatable activities for efficiency.
• Develop offensive security tooling, labs, and controlled testing environments.

Skills

Offensive security leadership

Red team operations

Penetration testing

Adversary emulation

AI-enabled security testing

Python scripting

Stakeholder communication

MITRE ATT&CK knowledge

Rules of engagement

Tools

Adversary-emulation tooling

Testing automation frameworks

Python

PowerShell

Bash

Job description

IDEMIA is seeking a Head of Offensive Security & Red Team to lead aggressive security testing across cloud, on-premises, and production environments. The role combines hands-on execution with strategic leadership, capability building, and provider management.

You will drive threat-informed testing, translate findings into actionable risk reductions, and advance AI-assisted offensive security capabilities while maintaining governance and safety.