Adversary Intelligence Manager - AI-Driven Threat Emulation

Socket.dev; Austin (TX); On-site; USD 124,000 - 209,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid parental leave

Flexible vacation

Job summary

SailPoint is seeking an Adversary Intelligence Manager to lead a combined Red Team and CTI function, elevating offensive security and threat intelligence capabilities across enterprise and product security. The role emphasizes AI-driven automation, adversary emulation, and collaboration with the SOC to improve defenses.

The position can be remote or based in Austin, TX, reporting to the Sr. Director of Cyber Defense Operations, with responsibilities spanning leadership, strategy, and risk

Qualifications

• Meet FedRAMP access requirements.
• 8–10 years of experience in cybersecurity, with at least 4 years managing or leading blended threat intelligence and offensive security operations.
• AI/Automation acumen: integrating Generative AI/LLMs/agentic frameworks into cybersecurity workflows.
• SOC and defensive collaboration to improve telemetry and detection maturity.
• Technical mastery across attack simulation frameworks, TIPs, scripting and tools.
• Certifications: CISSP, OSCE/OSEP, GREM, GCTI or equivalent.

Responsibilities

• Direct unified intelligence collection, analysis, and adversary emulation programs.
• Architect AI-driven automation workflows to scale threat intelligence collection.
• Co-design purple-team exercises with SOC and ASM teams.
• Translate offensive results into strategic risk profiles for executives.
• Mentor and lead a diverse team of engineers and analysts.
• Oversee development of custom tools and APIs to automate ingestion and reporting.
• Present threat briefings and post-mortems to cybersecurity leadership.

Skills

AI/Automation

SOC collaboration

Threat intelligence

Offensive security

Leadership

Tools

Threat Intelligence Platforms (TIPs)

Job description

SailPoint is seeking an Adversary Intelligence Manager to lead a combined Red Team and CTI function, elevating offensive security and threat intelligence capabilities across enterprise and product security. The role emphasizes AI-driven automation, adversary emulation, and collaboration with the SOC to improve defenses.

The position can be remote or based in Austin, TX, reporting to the Sr. Director of Cyber Defense Operations, with responsibilities spanning leadership, strategy, and risk