Senior Red Team Lead - Offensive Security

Sun Life Financial; Waterford; Hybrid; EUR 90,000 - 130,000; Full time

Job summary

Sun Life Financial is seeking a Senior Red Team Operator to lead offensive security across the enterprise in Waterford, Ireland. You will own planning, execution, reporting and remediation, working with security, engineering and risk teams to reduce threat exposure.

You will apply ATT&CK‑aligned methods, perform adversary emulation, and drive continuous improvement in processes, governance, and detection validation with a focus on regulatory expectations.

Qualifications

• 5-7 years’ experience in operational Cyber Security roles.
• University degree in computer science, computer engineering or computer security.
• Strong understanding of information security concepts and trends.
• Problem solving with creative solutions.
• Maintain high technical knowledge of systems and solutions.
• Industry certifications (SANS/CEH/CISSP) are a strong asset.
• Strong communication and presentation skills.

Responsibilities

• Own end-to-end offensive security lifecycle, including planning, scoping, scheduling, execution, reporting and remediation tracking.
• Define and improve offensive security processes, playbooks and engagement models.
• Coordinate Red Team, adversary emulation, purple team activities and third-party engagements.
• Provide delivery oversight for Red Team assessments and detection validation activities.
• Track and manage remediation, evidence and risk acceptance with engineering partners.
• Serve as liaison for audit, regulatory reviews and assurance activities.
• Advise on secure design and threat exposure to cross‑functional teams.

Skills

Operational cyber security

Problem solving

Communication skills

Technical knowledge

Education

University degree in computer science, computer engineering or computer security

Tools

ServiceNow

Confluence

Job description

Sun Life Financial is seeking a Senior Red Team Operator to lead offensive security across the enterprise in Waterford, Ireland. You will own planning, execution, reporting and remediation, working with security, engineering and risk teams to reduce threat exposure.

You will apply ATT&CK‑aligned methods, perform adversary emulation, and drive continuous improvement in processes, governance, and detection validation with a focus on regulatory expectations.