Senior Red Team & Offensive Security Lead

IDEMIA; Paris; On-site; EUR 120,000 - 180,000; Full time

Job summary

IDEMIA Secure Transactions, a division of IDEMIA Group, is seeking an experienced Senior Offensive Security Lead in Paris to shape and execute the company’s offensive security program. You will lead testing, ROE development, and capability roadmaps while coordinating with security, IT, and product teams.

You will drive red-team engagements, adversary emulation, and automated testing, building AI-assisted capabilities and ensuring risk-based remediation with stakeholders across the enterprise.

Qualifications

• 6–10 years of cybersecurity experience with hands-on offensive security, red teaming, or security research.
• Ability to independently scope, design, and run complex engagements from hypothesis to retesting.
• Strong depth in two areas such as AD/Entra ID, cloud, apps/APIs, containers, or Kubernetes.
• Knowledge of MITRE ATT&CK, attack-path analysis, privilege escalation, and C2 concepts.

Responsibilities

• Define and execute the offensive security strategy, testing plan, rules of engagement, and capability roadmap.
• Lead red-team campaigns, adversary emulation, and testing across cloud, identity, apps, networks, and data centers.
• Develop automated testing models and AI-assisted capabilities for faster validation of findings.
• Translate technical findings into business risk and drive remediation with stakeholders.

Skills

Offensive security

Red team operations

Penetration testing

Adversary emulation

Python

MITRE ATT&CK

Cloud platforms

Security automation

Adversary tooling

Job description

IDEMIA Secure Transactions, a division of IDEMIA Group, is seeking an experienced Senior Offensive Security Lead in Paris to shape and execute the company’s offensive security program. You will lead testing, ROE development, and capability roadmaps while coordinating with security, IT, and product teams.

You will drive red-team engagements, adversary emulation, and automated testing, building AI-assisted capabilities and ensuring risk-based remediation with stakeholders across the enterprise.