Global Lead, Adversary Emulation & Red Teaming

Danaher; Kraków; On-site; PLN 180,000 - 240,000; Full time

Job summary

Danaher in Kraków, Poland, seeks a Senior Global Red Team Lead to drive offensive validation across Windows, cloud, and identity environments. You will plan, execute, and lead adversary emulation campaigns and coordinate with legal and works-council stakeholders on global engagements.

Design and implement detection-validation loops with detection engineering, while shaping governance, safe-operations standards, and remediation validation cadence within the DIS organization.

Qualifications

• 7–9 years of offensive security or red team experience with leading engagements.
• Experience planning adversary emulation and red/purple team operations mapped to MITRE ATT&CK.
• Hands-on exploitation across Windows/Active Directory, identity, cloud and apps.
• Ability to translate offensive findings into prioritized controls with detection teams.
• Experience coordinating global engagements across legal and works-council contexts.

Responsibilities

• Design adversary-emulation campaigns and rules of engagement mapped to MITRE ATT&CK/ATLAS and business objectives.
• Engineer/develop offensive capability: tradecraft, tooling, C2 setup, and automation.
• Design the purple-team model and detection-validation feedback loop with detection engineering.
• Design sustainability & governance model: safe-operations standards, legal/safety coordination, remediation validation cadence.

Skills

Offensive security

Red team leadership

Adversary emulation

MITRE ATT&CK

Rules of engagement

Windows/Active Directory

Cloud security

Detection engineering

Education

Bachelor's degree in Cybersecurity/CS/IT/Engineering

Tools

Cobalt Strike

Mythic

BloodHound

Burp Suite

Job description

Danaher in Kraków, Poland, seeks a Senior Global Red Team Lead to drive offensive validation across Windows, cloud, and identity environments. You will plan, execute, and lead adversary emulation campaigns and coordinate with legal and works-council stakeholders on global engagements.

Design and implement detection-validation loops with detection engineering, while shaping governance, safe-operations standards, and remediation validation cadence within the DIS organization.