Global Director, Proactive Offensive Security

Aon Corporation; Utah; Hybrid; USD 133,000 - 175,000; Full time

Benefits offered by this job

401(k) plan

Employee stock purchase plan

Health insurance

Paid holidays

Paid vacation

Job summary

Aon Corporation seeks a Director to lead the global Offensive Security & Assurance within Proactive Threat Operations. You will evolve testing from point‑in‑time assessments to continuous adversary validation, purple‑team operations, and attack‑path elimination across the enterprise.

You will partner with Threat Intelligence, SOC, Cloud, Identity, and Application Security to translate findings into architectural improvements, strengthen detections, and verify remediation progress while mentoring

Qualifications

• Extensive experience (8+ years) in offensive security and testing.
• Proven leadership of large, global security testing programs.
• Deep technical knowledge across AD, Entra ID, cloud, networks, apps.
• Strong governance, safety controls, and engagement practices.
• Excellent communication for executive reporting.

Responsibilities

• Lead the global Offensive Security & Assurance capability.
• Define the offensive security strategy, operating model, priorities, standards, and roadmap.
• Evolve testing toward continuous adversary validation and recurring purple-team operations.
• Develop and maintain threat-informed adversary emulation scenarios.
• Plan, conduct, and oversee testing across endpoints, identity, cloud, networks, apps.
• Build and mature a purple-team capability connected to AC3/SOC.
• Partner with Threat Intelligence to translate adversary activity into tests.
• Partner with Threat Hunting to identify hypotheses and attack paths.
• Partner with Vulnerability & Exposure Management on exploitability.
• Require retesting and evidence before closing offensive findings.
• Identify opportunities to eliminate attack paths via architecture/configuration changes.
• Establish continuous control-validation exercises for high-risk scenarios.
• Develop adversary-emulation playbooks mapped to MITRE ATT&CK.
• Improve detection engineering with telemetry and test evidence.
• Collaborate with Applied Security Research on tooling and frameworks.
• Maintain governance, authorization, safety controls, and ROE for offensive activity.
• Manage internal and external testing resources; ensure third parties supplement internal capability.
• Provide senior leadership with clear reporting on exploitable risk and remediation progress.
• Recruit, develop, and mentor offensive security practitioners.

Skills

Offensive security

Penetration testing

Red teaming

Adversary emulation

Purple team

Threat intelligence

Leadership

Communication

Security governance

Education

Bachelor's degree in Computer Science

Tools

Active Directory

Entra ID

Azure

AWS

GCP

Job description

Aon Corporation seeks a Director to lead the global Offensive Security & Assurance within Proactive Threat Operations. You will evolve testing from point‑in‑time assessments to continuous adversary validation, purple‑team operations, and attack‑path elimination across the enterprise.

You will partner with Threat Intelligence, SOC, Cloud, Identity, and Application Security to translate findings into architectural improvements, strengthen detections, and verify remediation progress while mentoring