Manager, Adversary Intelligence

SailPoint Technologies, Inc.; United States; Remote; USD 124,000 - 209,000; Full time

Benefits offered by this job

Health coverage

Disability coverage

Life insurance

401(k)

Job summary

SailPoint Technologies, Inc. is seeking an Adversary Intelligence Manager to lead and unify Red Team and Cyber Threat Intelligence efforts.

The role focuses on threat emulation, AI-enabled automation, and collaboration with the SOC to strengthen defense posture across enterprise and applications. Ideal candidates will have 8–10 years in cybersecurity with leadership in blended intelligence and offensive security, plus strong communication and program-management skills.

Qualifications

• 8–10 years of experience in cybersecurity with leadership in blended threat intelligence and offensive security (Red Team/Purple Team).
• AI/Automation experience with Generative AI, LLMs, or agentic frameworks preferred.
• Strong collaboration with SOC, IR, and detection engineering to improve telemetry and maturity.
• Deep technical mastery across attack simulation, threat intel platforms, and custom tooling.

Responsibilities

• Direct the unified intelligence collection, analysis, and adversary emulation programs, ensuring CTI informs red team campaigns.
• Architect AI-driven and agentic automation workflows to scale threat intelligence and emulate adversaries.
• Co-design purple-team exercises with SOC and ASM to translate findings into detection or prevention strategies.
• Translate offensive results and threat intel into strategic risk profiles and executive recommendations.
• Lead and mentor a diverse team of offensive security engineers and threat analysts across disciplines.
• Oversee development of custom tools and APIs for automated data ingestion, reporting, and emulation.
• Deliver high-impact threat briefings and incident post-mortems to cybersecurity leadership.

Skills

Leadership

Communication

Program management

SOC collaboration

AI/Automation

Tools

Threat intel platforms

Attack simulation frameworks

Scripting (Python/PowerShell)

TIPs

Job description

SailPoint’s Cybersecurity organization is seeking an Adversary Intelligence Manager with a passion for cybersecurity and protecting the organization. In a strategic move to elevate our Cyber Defense Operations, we are combining our Red Team and Cyber Threat Intelligence (CTI) functions into a single, unified Adversary Intelligence team. This team will strategically sit adjacent to our Security Operations Center (SOC) within the Cyber Defense Operations org. The successful candidate will lead this newly combined organization, uplifting our offensive and intelligence capabilities to continually test the security of our products, enterprise, and response readiness.

This new leader will partner closely with our Security Operations Center (SOC) to drive threat-informed defensive measures and ensure seamless collaboration across our Cyber Defense Operations organization. We’re seeking a candidate with proven technical capabilities who can work on both the enterprise and application sides of the house, while pushing the boundaries of innovation. A key focus for this role will be pioneering the use of AI and agentic capabilities to automate, scale, and enhance adversary emulation, threat hunting, and intelligence analysis.

Our new Adversary Intelligence Manager will embrace the opportunity to work across diverse platforms and will play a key role in shaping our future security posture. They’ll work with an established team of talented and dedicated teammates, guiding both emerging and established talent. They’ll naturally embody the 4 I’s at SailPoint (Individual, Impact, Innovation, and Integrity), embrace new challenges, and be a positive contributor to an already excellent work culture and environment.

This is a challenging and impactful role where you will have the opportunity to work with both internal and external stakeholders, including our fantastic colleagues in IT, DevOps, Product Engineering, Security Engineering, and the wider Cyber Security team.

This role reports directly to the Sr. Director of Cyber Defense Operations and can be remote or based in Austin, TX.

Responsibilities:

• Lead Unified Program: Direct the unified intelligence collection, analysis, and adversary emulation programs, ensuring CTI directly informs and shapes targeted red team campaigns.

• Pioneer AI & Agentic Innovation: Architect and implement AI-driven and agentic automation workflows to scale threat intelligence collection, synthesize unstructured threat data, and dynamically execute emulation playbooks.

• SOC Partnership & Purple Teaming: Co-design collaborative purple-team exercises and continuous feedback loops with the SOC and Attack Surface Management (ASM) teams to rapidly translate offensive findings into robust detection engineering rules or prevention strategies.

• Strategic Risk Enumeration: Translate complex offensive testing results and emerging threat intelligence into strategic risk profiles and actionable, executive-level recommendations for business leaders.

• Team Leadership & Mentorship: Guide, mentor, and develop a diverse team of senior offensive security engineers and threat intelligence analysts, fostering a collaborative culture across historically distinct disciplines.

• Advanced Tool Development: Oversee the innovation of custom tools, techniques, and APIs to automate data ingestion, intelligence reporting, and dynamic adversary emulation.

• Executive Briefings: Present high-impact threat briefings, risk assessments, and incident post-mortems to cybersecurity leadership and broader enterprise stakeholders.

Requirements:

• Meet FedRAMP access requirements.

• 8–10 years of experience in cybersecurity, with at least 4 years managing or leading blended threat intelligence and offensive security (Red Team / Purple Team) operations.

• AI/Automation Acumen: Practical exposure to or strong conceptual understanding of integrating Generative AI, Large Language Models (LLMs), or agentic frameworks into cybersecurity workflows.

• SOC & Defensive Collaboration: Proven track record of partnering with SOC, incident response, or detection engineering teams to improve overall defensive telemetry and detection maturity.

• Technical Expertise: Deep technical mastery across attack simulation frameworks, commercial/open-source threat intelligence platforms (TIPs), and hands‑on scripting/custom tool development.

• Strong leadership, communication, and program management abilities, with a history of building high-performing, cross‑functional teams.

• Certifications: CISSP, OSCE/OSEP, GREM, GCTI, or equivalent demonstrable industry expertise.

Benefits and Compensation listed vary based on the location of your employment and the nature of your employment with SailPoint.

As a part of the total compensation package, this role may be eligible for the SailPoint Corporate Bonus Plan or a role‑specific commission, along with potential eligibility for equity participation. SailPoint maintains broad salary ranges for its roles to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect SailPoint’s differing products, industries, and lines of business. Candidates are typically placed into the range based on the preceding factors as well as internal peer equity. We estimate the base salary, for US‑based employees, will be in this range from (min‑max, USD):

$124,100 - $209,214.00

Base salaries for employees based in other locations are competitive for the employee’s home location.

Benefits Overview

1. Health and wellness coverage: Medical, dental, and vision insurance

2. Disability coverage: Short‑term and long‑term disability

3. Life protection: Life insurance and Accidental Death & Dismemberment (AD&D)

4. Additional life coverage options: Supplemental life insurance for employees, spouses, and children

5. Flexible spending accounts for health care, and dependent care; limited purpose flexible spending account

6. Financial security: 401(k) Savings and Investment Plan with company matching

7. Time off benefits: Flexible vacation policy

8. Holidays: 8 paid holidays annually

9. Sick leave

10. Parental support: Paid parental leave

11. Employee Assistance Program (EAP) and Care Counselors

12. Voluntary benefits: Legal Assistance, Critical Illness, Accident, Hospital Indemnity and Pet Insurance options

13. Health Savings Account (HSA) with employer contribution

SailPoint is an equal opportunity employer and we welcome all qualified candidates to apply to join our team. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other category protected by applicable law.