Adversary Emulation Lead — Offensive Security (Hybrid)

Vanguard Group; Malvern (Chester County); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Vanguard Group is seeking an experienced Offensive Security Operations Lead to drive advanced security testing and adversary simulation activities. You will execute assessments across web apps, cloud environments, and infrastructure, emulating realistic attacker behaviors to identify weaknesses and validate controls.

You will develop attack scenarios using MITRE ATT&CK, contribute to methodology development, and lead reporting with actionable remediation guidance.

Qualifications

• 3–5+ years of offensive security, penetration testing, red teaming, or related cybersecurity experience.
• Experience conducting security assessments across web apps, infrastructure, cloud, and identity environments.
• Strong understanding of attacker methodologies, attack chains, and offensive tradecraft.
• Proficiency with scripting languages (Python, PowerShell, Bash) and related tooling.

Responsibilities

• Lead offensive security operations, perform penetration tests, adversary emulation exercises, and red team activities across multiple tech domains.
• Assess web apps, APIs, cloud environments, identity platforms, infrastructure, and emerging tech; identify vulnerabilities and attack paths.
• Develop and execute attack scenarios based on threat intelligence and adversary tradecraft; reference MITRE ATT&CK framework.
• Analyze findings, create executive summaries, and present remediation recommendations to stakeholders.
• Develop tooling, scripts, and testing frameworks; automate repetitive testing and reporting tasks.
• Collaborate with engineering, security, and risk teams; contribute to purple team efforts and knowledge-sharing.

Skills

Penetration testing

Red team operations

Adversary emulation

Python scripting

PowerShell scripting

Bash scripting

Strong communication

Tools

Burp Suite

Cobalt Strike

Metasploit

Nmap

BloodHound

Impacket

Job description

Vanguard Group is seeking an experienced Offensive Security Operations Lead to drive advanced security testing and adversary simulation activities. You will execute assessments across web apps, cloud environments, and infrastructure, emulating realistic attacker behaviors to identify weaknesses and validate controls.

You will develop attack scenarios using MITRE ATT&CK, contribute to methodology development, and lead reporting with actionable remediation guidance.