Director, Red Team

AmerisourceBergen Services Corporation; Carrollton (TX); On-site; USD 160,000 - 260,000; Full time

Benefits offered by this job

Medical, dental, vision

Professional development

Family support benefits

Job summary

AmerisourceBergen Services Corporation in Carrollton, TX seeks a Director of Red Team to lead offensive security efforts, orchestrate adversary simulations, and guide vendor engagements. You will shape strategy, define engagement rules, and partner with IT, security operations, and risk teams to mature the organization’s security posture.

The role requires 8+ years in cybersecurity with 6+ in offensive security, plus strong leadership and communication skills to brief executives and drive

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or equivalent work experience.
• 8+ years of progressive experience in cybersecurity, with at least 6 years dedicated to offensive security role in red team, penetration testing, adversary emulation, or exploit development.
• 3+ years leading offensive security teams or programs, with demonstrated success building and maturing the function at enterprise scale.
• Demonstrated experience planning and leading full-scope, objective-based red team operations against mature, monitored environments.
• Strong command of adversary tradecraft and the detection surfaces it creates, including how modern EDR, identity protection, and cloud logging observe attacker activity.
• Practical fluency with MITRE ATT&CK and threat intelligence, and the ability to translate actor behavior into realistic emulation plans.
• Excellent written and verbal communication skills, with proven ability to deliver difficult findings without damaging partnership, and to brief executives credibly.

Responsibilities

• Manage and mature the Red Team strategy, aligning the overall vision and roadmap to business risks and posture.
• Maintain and enforce clear Rules of Engagement, standard operating procedures, and safety controls to ensure adversary simulations test controls effectively without degrading production stability.
• Align testing methodologies with threat intelligence frameworks to emulate threat actors and emerging tactics, techniques, and procedures relevant to business risk profiles.
• Lead, mentor, and mature a team of high-performing red team engineers and offensive security operators, fostering continuous learning and skill development.
• Balance team bandwidth between complex, long-term targeted campaigns, specialized security assessments, and research/tooling development.
• Select and manage third-party offensive security providers for external assessments, scoping complex engagements and statement of work deliverables.
• Validate that vendor findings maintain high technical standards and actionable quality.
• Integrate third-party findings into internal tracking mechanisms to ensure unified reporting and remediation.
• Partner closely with detection & response operations, threat intelligence, and security engineering to ensure red team findings drive tangible improvements in preventative and detective controls.
• Translate complex exploit chains and tactical findings into clear risk impact narratives for executive leadership and business unit leaders.

Skills

Red Team Leadership

Offensive Security

Threat Emulation

MITRE ATT&CK

Executive Briefing

Education

Bachelor’s degree in Cybersecurity/CS/IS

8+ years cybersecurity experience

3+ years leading offensive security teams

CISSP/CISM preferred

Tools

EDR

Job description

Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere.

Job Details

The Director of Red Team is a senior cybersecurity leadership role responsible for directing offensive security operations, managing the internal red team, and overseeing external vendor engagements for advanced adversary simulations and security assessments. This position sits at the intersection of technical offensive expertise, strategic planning, and operational leadership.

The ideal candidate will build, empower, and guide highly skilled offensive security analysts while establishing partnerships across technology and operational business teams to scale testing capabilities and mature security posture across complex enterprise environments.

RESPONSIBILITIES

• Manage and mature the Red Team strategy, aligning the overall vision and roadmap to business risks and posture.
• Maintain and enforce clear Rules of Engagement, standard operating procedures, and safety controls to ensure adversary simulations test controls effectively without degrading production stability.
• Align testing methodologies with threat intelligence frameworks to emulate threat actors and emerging tactics, techniques, and procedures relevant to business risk profiles.
• Lead, mentor, and mature a team of high-performing red team engineers and offensive security operators, fostering continuous learning and skill development.
• Balance team bandwidth between complex, long-term targeted campaigns, specialized security assessments, and research/tooling development.
• Select and manage third-party offensive security providers for external assessments, scoping complex engagements and statement of work deliverables.
• Validate that vendor findings maintain high technical standards and actionable quality.
• Integrate third-party findings into internal tracking mechanisms to ensure unified reporting and remediation.
• Partner closely with detection & response operations, threat intelligence, and security engineering to ensure red team findings drive tangible improvements in preventative and detective controls.
• Translate complex exploit chains and tactical findings into clear risk impact narratives for executive leadership and business unit leaders.

EDUCATION & QUALIFICATIONS

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or equivalent work experience.

8+ years of progressive experience in cybersecurity, with at least 6 years dedicated to offensive security role in red team, penetration testing, adversary emulation, or exploit development.

3+ years leading offensive security teams or programs, with demonstrated success building and maturing the function at enterprise scale.

Demonstrated experience planning and leading full-scope, objective-based red team operations against mature, monitored environments.

Strong command of adversary tradecraft and the detection surfaces it creates, including how modern EDR, identity protection, and cloud logging observe attacker activity.

Practical fluency with MITRE ATT&CK and threat intelligence, and the ability to translate actor behavior into realistic emulation plans.

Excellent written and verbal communication skills, with proven ability to deliver difficult findings without damaging partnership, and to brief executives credibly.

PREFERRED CERTIFICATIONS

OSCP — Offensive Security Certified Professional

OSEP — Experienced Penetration Tester

OSED — Exploit Developer

GIAC GXPN — Exploit Researcher and Advanced Penetration Tester

GIAC GPEN — Penetration Tester

GIAC GRTP — Red Team Professional

GIAC GCPN — Cloud Penetration Tester

GIAC GWAPT — Web Application Penetration Tester

Bachelor’s degree in cyber security, computer science, information technology, information systems, or a related field, or equivalent experience required.

Master’s degree in cyber security, computer science, information technology, information systems, business administration, or a related field, or equivalent experience preferred.

10+ years of experience in cyber threat intelligence, cyber security, security operations, incident response, threat analysis, or a related field required.

5+ years of experience in a management capacity required.

Certified in Certified Information Systems Security Professional (CISSP) or equivalent certification preferred.

Certified in Certified Information Security Manager (CISM) or equivalent certification preferred.

Affiliated Companies

AmerisourceBergen Services Corporation

Cencora is a leading global pharmaceutical solutions company that is committed to improving the lives of people and animals everywhere. We connect manufacturers, providers, and patients to ensure that anyone can get the therapies they need, where and when they need them.

We’re a purpose-driven organization, where all of our team members around the world are united in our responsibility to create healthier futures. We work together every day to help our partners bring their innovations to patients worldwide, creating unparalleled access and impact at the center of health.

What Cencora offers

We provide compensation, benefits, and resources that enable a highly inclusive culture and support our team members’ ability to live with purpose every day.

In addition to traditional offerings like medical, dental, and vision care, we also provide a comprehensive suite of benefits that focus on the physical, emotional, financial, and social aspects of wellness.

This encompasses support for working families, which may include backup dependent care, adoption assistance, infertility coverage, family building support, behavioral health solutions, paid parental leave, and paid caregiver leave.

To encourage your personal growth, we also offer a variety of training programs, professional development resources, and opportunities to participate in mentorship programs, employee resource groups, volunteer activities, and much more.

• medical, dental, and vision care
• backup dependent care, adoption assistance, infertility coverage, family building support, behavioral health solutions, paid parental leave, and paid caregiver leave
• training programs, professional development resources, mentorship programs, employee resource groups, volunteer activities, and much more

Equal Employment Opportunity

Cencora is committed to providing equal employment opportunity without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, age, disability, veteran status or membership in any other class protected by federal, state or local law. The company’s continued success depends on the full and effective utilization of qualified individuals. Therefore, harassment is prohibited and all matters related to recruiting, training, compensation, benefits, promotions and transfers comply with equal opportunity principles and are non-discriminatory.

Cencora is committed to providing reasonable accommodations to individuals with disabilities during the employment process which are consistent with legal requirements. If you wish to request an accommodation while seeking employment, please call 888.692.2272 or email [e-mail]. We will make accommodation determinations on a request-by-request basis. Messages and emails regarding anything other than accommodations requests will not be returned.