Manager, Threat (Red Team)

Coca-Cola; Atlanta (GA); Presencial; USD 125 000 - 148 000; Tempo integral

Resumo da oferta

The Coca-Cola Company seeks a Manager, Threat Simulation & Red Team to lead adversary simulations and breach-and-attack testing across the enterprise. You will design realistic attack scenarios, operate BAS platforms, and deploy deception tech to validate detection and response capabilities.

Collaboration with SOC, detection engineering, and threat intel is essential. Ideal candidates have 5+ years in adversary simulation or related fields, hands-on experience with Mandiant / AttackIQ /

Qualificações

• Minimum 5 years of progressive cybersecurity experience, with significant focus on adversary simulation, red teaming, purple teaming, or detection validation.

Responsabilidades

• Adversary Simulation & Purple Teaming: Design and execute adversary simulation exercises to test detection, alerting, and response against realistic attack scenarios.
• Breach and Attack Simulation: Operate BAS platforms to provide continuous, automated validation of security controls.
• Deception Technology: Design and deploy honeypots, honeytokens, and decoy assets across the environment.
• Detection Gap Analysis & Improvement: Maintain MITRE ATT&CK mapped coverage and translate findings into improved rules and playbooks.
• Reporting & Continuous Improvement: Produce evidence-based reports and continually refine methodologies and tooling.

Conhecimentos

Adversary Simulation

Red Teaming

Purple Teaming

MITRE ATT&CK

Detection Validation

SIEM

EDR

Threat Intelligence

Cobalt Strike

Metasploit

Python

PowerShell

Teamwork

Communication

Formação académica

Bachelor's degree in Cybersecurity, Computer Science, Engineering, Information Systems, or related technical field

Master's degree or OSCP/GPEN/GCIH/GXPN/CRTO or equivalent

Ferramentas

Mandiant Security Validation

AttackIQ

SafeBreach

Cobalt Strike

Metasploit

Descrição da oferta de emprego

Manager, Threat (Red Team) - Logo### Manager, Threat (Red Team)Apply: US - GA - Atlanta: Full time: Posted Today: R-144462**Job Description Summary:****Overview**The Manager, Threat Simulation & Red Team is The Coca-Cola Company's hands-on operator for adversary simulation, breach and attack simulation (BAS), and deception technologies. This role tests the Company's detection and response capabilities by emulating real-world adversary behavior, running continuous attack simulations, and deploying deception technologies that expose gaps in the Company's defensive posture. The goal is not traditional penetration testing or application security, but rather validating that the SOC, detection engineering, and incident response teams can see, catch, and stop real attacks.Reporting to the Senior Manager, Cyber Threat, this is an individual-contributor role focused on deep technical execution. The Manager designs and runs threat simulation exercises mapped to real adversary tradecraft, operates breach and attack simulation platforms, deploys and manages honeypots and honeytokens, and delivers clear, evidence-based assessments of defensive gaps. The role partners closely with Cybersecurity Operations, Detection Engineering, and Threat Intelligence to turn simulation findings into measurable improvements in the Company's ability to detect and respond to threats.**Key Responsibilities****Adversary Simulation & Purple Teaming*** Design and execute adversary simulation exercises that test the Company's detection, alerting, and response capabilities against realistic attack scenarios.* Develop threat simulation scenarios mapped to MITRE ATT&CK techniques and informed by current threat intelligence on adversaries relevant to the Company.* Conduct purple team exercises in partnership with SOC and detection engineering teams, collaboratively identifying detection gaps and validating improvements.* Simulate full attack chains, including initial access, lateral movement, privilege escalation, persistence, and data exfiltration, to test end-to-end defensive coverage.**Breach and Attack Simulation (BAS)*** Operate and optimize breach and attack simulation platforms (such as Mandiant Security Validation, AttackIQ, or SafeBreach) to provide continuous, automated validation of security controls.* Define and maintain a library of attack simulations aligned to the Company's threat profile and detection priorities.* Analyze BAS results to identify detection gaps, control failures, and configuration drift, and work with detection engineering to remediate findings.* Produce regular reporting on control effectiveness, detection coverage, and trends over time.**Deception Technology*** Design, deploy, and manage deception technologies, including honeypots, honeytokens, and decoy assets, across the Company's environment.* Integrate deception alerts into SOC workflows, ensuring timely triage and investigation of deception-triggered events.* Continuously evolve the deception program to reflect changes in the Company's environment, adversary behavior, and detection priorities.**Detection Gap Analysis & Improvement*** Maintain a structured view of the Company's detection coverage mapped to MITRE ATT&CK, identifying gaps and prioritizing improvements.* Partner with Detection Engineering and Cybersecurity Operations to translate simulation findings into new or improved detection rules, playbooks, and response procedures.* Track remediation of detection gaps and validate that improvements are effective through follow-up testing.**Reporting & Continuous Improvement*** Produce clear, evidence-based reports on simulation results, detection coverage, and defensive gap trends for Cyber Threat leadership and the CISO.* Continuously improve simulation methodologies, tooling, and processes based on evolving adversary tradecraft and lessons learned.* Stay current with industry developments in adversary simulation, BAS, deception technology, and detection engineering.**Qualifications*** Minimum 5 years of progressive cybersecurity experience, with significant focus on adversary simulation, red teaming, purple teaming, or detection validation.* Hands-on experience with breach and attack simulation platforms such as Mandiant Security Validation, AttackIQ, SafeBreach, or similar tools.* Strong working knowledge of adversary tradecraft, MITRE ATT&CK framework, and the ability to design realistic attack simulations based on current threat intelligence.* Experience with deception technologies, including honeypots, honeytokens, and decoy infrastructure design and deployment.* Demonstrated ability to conduct purple team exercises and work collaboratively with SOC and detection engineering teams to improve detection coverage.* Proficiency with common offensive security tools and techniques (Cobalt Strike, Metasploit, custom C2 frameworks) used in adversary simulation contexts.* Strong understanding of SIEM, EDR, network monitoring, and detection engineering concepts, sufficient to evaluate detection gaps and recommend improvements.* Excellent written and verbal communication skills, with the ability to produce clear, evidence-based simulation reports for technical and executive audiences.* Relevant certifications such as OSCP, GPEN, GCIH, GXPN, CRTO, or CRTL are preferred.* Scripting and automation skills (Python, PowerShell, or equivalent) for developing custom simulation tools and automating testing workflows.**Education*** Bachelor's degree in Cybersecurity, Computer Science, Engineering, Information Systems, or related technical field required.* Master's degree or relevant professional certification (OSCP, GPEN, GCIH, or equivalent) highly desirable.**Reporting Relationship**Reports to the Senior Manager, Cyber Threat, within the Cyber Defense team of the Chief Information Security Office (CISO) organization.No direct reports.**Location**Atlanta, GA (Global Headquarters)**Travel**Estimated up to 10% travel, primarily domestic, with occasional travel for industry conferences, training, and vendor engagements.The Coca-Cola Company will not offer sponsorship for employment status (including, but not limited to, H1-B visa status and other employment-based nonimmigrant visas) for this position. Accordingly, all applicants must be currently authorized to work in the United States on a full-time basis and must not require The Coca-Cola Company's sponsorship to continue to work legally in the United States.**Skills:**Agile Methodology, Business Requirements, Communication, Computer Programming, Configuring (Inactive), Data Analysis, Financial Processing, Information Systems, Software Development, Structured Query Language (SQL), Systems Analysis, Systems Development Lifecycle (SDLC), Teamwork, Test Environments, Troubleshooting, Waterfall Model, Workflow Management**Pay Range:**United States: 124,600 - 148,200 USD*Base pay offered may vary depending on geography, job-related knowledge, skills, and experience. A full range of medical, financial, and/or other benefits, dependent on the position, is offered.***Annual Incentive Reference Value Percentage:**15*Annual Incentive reference value is a market-based competitive value for your role. It falls in the middle of the range for your role, indicating performance at target.***Location(s):**United States of America**City/Cities:**Atlanta**Travel Required:**00% - 25%**Relocation Provided:**No**Job Posting End Date:**November 3, 2026