Head of Red Team & Offensive Security

IDEMIA; Courbevoie; On-site; EUR 90,000 - 130,000; Full time

Job summary

IDEMIA Secure Transactions is seeking a senior Head of Offensive Security to lead the company’s offensive security capabilities, including red teaming, adversary simulation, and automated testing across cloud, identity, apps, and networks.

This hands-on player-coach role combines technical leadership with provider management, ensuring safe testing practices, and translating findings into measurable defensive improvements.

Qualifications

• 6-10 years of relevant cybersecurity experience, including offensive security, red teaming, or security research.
• Ability to independently scope, design, and execute complex offensive-security engagements from hypothesis to retesting.
• Strong depth in two areas such as cloud platforms, identity, apps/APIs, endpoints, or networks.

Responsibilities

• Define and execute offensive security strategy, testing plan, operating model, and capability roadmap.
• Lead red-team campaigns, adversary emulation, pentesting, attack-path analysis, and validation across cloud, on-prem, and data centers.
• Prioritize activities based on business criticality, exposure, threats, and AI-enabled risks.
• Develop automated testing models to accelerate vulnerability validation and remediation.
• Build AI-assisted and agentic Red Team capabilities for reconnaissance, hypothesis generation, path discovery, and testing automation.
• Evaluate emerging AI-enabled offensive security technologies for safe adoption.
• Lead Purple Team activities to translate findings into improved detections and defenses.
• Define rules of engagement, safety controls, confidentiality, escalation paths, and production safeguards.
• Translate technical findings into business risk and drive remediation, retesting, risk treatment, or escalation.
• Manage external pentest providers and internalize repeatable activities to improve responsiveness and cost efficiency.
• Build and maintain offensive security toolchain, labs, and controlled testing environments.
• Support critical projects and cloud transformations with targeted offensive security validation.
• Assist during major cyber incidents with attack-path analysis and exposure validation.
• Develop autonomy of the team through coaching and knowledge sharing.
• Produce KPIs/KRIs covering testing coverage, findings, remediation, and provider performance.

Skills

Red teaming

Penetration testing

Adversary emulation

Python scripting

Automation

Threat modeling

Stakeholder communication

Tools

MITRE ATT&CK

Kubernetes

PowerShell

Bash

Go

C#

Rust

Python

Job description

IDEMIA Secure Transactions is seeking a senior Head of Offensive Security to lead the company’s offensive security capabilities, including red teaming, adversary simulation, and automated testing across cloud, identity, apps, and networks.

This hands-on player-coach role combines technical leadership with provider management, ensuring safe testing practices, and translating findings into measurable defensive improvements.