Offensive Security Lead: Threat Intel & Red Team

ANB Bank; Cheyenne (WY); On-site; USD 73,000 - 107,000; Full time

Benefits offered by this job

PTO: 4 weeks

Medical, Dental, Vision Insurance

401(k) with company match

Discretionary annual bonus

Job summary

ANB Bank is seeking an Information Security Lead for Offensive and Threat Intel to own and advance the organization’s offensive security program across on-prem and cloud environments. You will guide red team operations, adversary emulation, and targeted testing to improve detection and response while coordinating with SOC and engineering teams.

The role requires senior expertise in Windows/AD, identity attack paths, and cloud security with hands-on experience in C2, EDR/XDR evasion, and rogue

Qualifications

• Seven years of related experience and/or training.
• Preferred college degree; or equivalent combination of education and experience.
• Demonstrated expertise in Windows/Active Directory, identity attack paths (Kerberos/NTLM/LDAP/SSO), and cloud (Azure/Microsoft 365 a plus).
• Hands‑on proficiency with C2 frameworks, EDR/XDR evasion techniques, password/credential attack methods, and lateral movement.
• Strong understanding of detection engineering concepts, logging/telemetry, and purple team collaboration.
• Exceptional communication skills with the ability to translate complex findings into business‑aligned risk narratives.
• Several industry standard Information Security advanced certifications (OSCP, GXPN, CISSP) in good standing and appropriate training and experience required.

Responsibilities

• Offensive Operations Program Ownership.
• Define and maintain the offensive security strategy, roadmap, playbooks, SLAs, and rules of engagement (ROE).
• Own intake and scoping for engagements; prioritize based on business impact, threat intel, and control validation needs.
• Ensure all activities align with legal, regulatory, and corporate policy requirements, including operational safety and privacy controls.
• Red Team & Adversary Emulation
• Plan and execute realistic, threat-informed operations mapping to MITRE ATT&CK, targeting identity, endpoints, network, applications, and cloud services.
• Develop and maintain adversary emulation plans, chained attack paths, and objective-based scenarios for critical business processes.
• Oversee exploitation research and proof-of-concept development (privilege escalation, lateral movement, persistence) with strict safeguards and de-confliction.
• Lead purple team exercises to drive measurable detections and response playbook improvements with Detection Engineering and SOC teams.

Skills

Windows/Active Directory

Identity attack paths

Cloud (Azure/Microsoft 365)

C2 frameworks

EDR/XDR evasion

Lateral movement

Communication skills

Education

Bachelor's degree or equivalent

Industry certifications (OSCP/GXPN/CISSP)

Tools

BloodHound

Burp Suite

Job description

ANB Bank is seeking an Information Security Lead for Offensive and Threat Intel to own and advance the organization’s offensive security program across on-prem and cloud environments. You will guide red team operations, adversary emulation, and targeted testing to improve detection and response while coordinating with SOC and engineering teams.

The role requires senior expertise in Windows/AD, identity attack paths, and cloud security with hands-on experience in C2, EDR/XDR evasion, and rogue