Red Team Manager

Citizens; Marlton (NJ); On-site; USD 170,000 - 230,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Retirement benefits

Flexible work arrangements

Education reimbursement

Wellness programs

Paid time off

Job summary

Citizens is seeking a Manager of Red Team to lead the organization's offensive security program in the United States. The role drives adversary emulation, AI-enabled attack simulations, and purple team engagements to elevate detection, response, and overall resilience.

You will mentor a team of Red Team professionals, coordinate with Cybersecurity Operations, Threat Intelligence, and Legal teams, and influence senior leadership with risk-based findings and remediation plans.

Qualifications

• Bachelor's degree in Cybersecurity, CS, IT, Engineering, or equivalent.
• 8+ years in cybersecurity with at least 5 years in offensive security and Red Team operations.
• 3+ years in people leadership managing security engineers or Red Team staff.

Responsibilities

• Own and evolve the enterprise Red Team program, including adversary emulation and AI-related attacks.
• Lead, mentor, and develop a team of Red Team professionals through hiring and performance management.
• Design and execute realistic Red Team and Purple Team engagements, including assumed breach scenarios.
• Assess risks from AI, automation, and data-driven systems within offensive testing strategies.
• Ensure Red Team activities are conducted safely, ethically, and within guardrails.
• Partner with Cybersecurity Operations, Detection Engineering, Security Architecture, and Technology teams to strengthen detection and response.
• Define standards, tools, processes, and metrics for Red Team operations.
• Translate findings into actionable risk mitigation for technical and executive audiences.
• Support audit, risk management, and regulatory activities via threat-informed testing.
• Maintain awareness of evolving threat actor tactics and best practices.

Skills

Offensive security

Red Team operations

Adversary emulation

Penetration testing

Leadership

Stakeholder management

Communication

Risk management

AI security testing

Threat intelligence integration

Education

Bachelor's degree in Cybersecurity

Tools

Automation tooling

Offensive security tools

Job description

Description

Manager, Red Team

Role Summary

The Manager, Red Team leads the organization's red team capability, responsible for simulating real world cyber threats, including AI enabled attack scenarios, to strengthen detection, response, and overall cyber resilience. This role owns the strategy, execution, and continuous evolution of the Red Team program, ensuring adversary emulation and purple team engagements across traditional and AI augmented environments drive measurable improvements to the organization’s security posture.

Reporting to Cyber Security leadership, this position leads a team of offensive security professionals and partners closely with Cybersecurity Operations, Detection Engineering, Threat Intelligence, Legal, Risk, Conduct, and Technology teams. The role requires deep offensive security expertise, strong leadership capabilities, risk management experience, and the ability to communicate effectively with technical and executive audiences.

This position is ideal for a leader who understands how artificial intelligence is reshaping the threat landscape and how to safely test AI systems alongside enterprise infrastructure, applications, and data environments.

Key Responsibilities

• Own and continuously evolve the enterprise Red Team program, including adversary emulation, threat informed testing, and advanced offensive security assessments.
• Lead, mentor, and develop a team of Red Team professionals through hiring, performance management, coaching, and career development.
• Design and execute realistic Red Team and Purple Team engagements, including assumed breach scenarios, intelligence driven campaigns, and AI related attack simulations.
• Assess risks introduced by AI, automation, and data driven systems, incorporating those risks into offensive security testing strategies.
• Ensure all Red Team activities are conducted safely, ethically, and within defined operational guardrails to minimize business disruption and risk.
• Partner with Cybersecurity Operations, Detection Engineering, Security Architecture, and Technology teams to strengthen detection capabilities, response procedures, and security controls.
• Define standards, tools, processes, and performance metrics for Red Team operations, balancing custom developed capabilities with commercial platforms and emerging AI security technologies.
• Translate findings into actionable risk mitigation recommendations and communicate results effectively to technical stakeholders and senior leadership.
• Support audit, compliance, risk management, and regulatory activities through threat informed testing and control validation.
• Maintain awareness of evolving threat actor tactics, techniques, and procedures, applying industry best practices to Red Team operations.

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field, or an equivalent combination of education and experience.
• 8+ years of progressive cybersecurity experience, including at least 5 years in offensive security, Red Team operations, adversary emulation, or penetration testing within a mid to large enterprise environment.
• 3+ years of people leadership experience managing senior security engineers, Red Team practitioners, or offensive security teams.
• Demonstrated experience leading complex Red Team and Purple Team engagements, including intelligence driven campaigns and assumed breach operations.
• Strong understanding of attacker methodologies, enterprise attack paths, and modern offensive security frameworks.
• Experience assessing AI security risks and conducting security testing of AI enabled products, services, applications, or workflows.
• Proven success translating offensive security findings into measurable improvements in detection, response, and overall security posture.
• Experience operating within highly regulated or risk sensitive environments.
• Strong communication, presentation, and stakeholder management skills, including the ability to influence senior leaders and drive cross functional collaboration.

Preferred Qualifications

• Experience developing custom offensive security tools, automation, or adversary simulation capabilities.
• Familiarity with cloud security testing across AWS, Azure, and Google Cloud environments.
• Experience testing identity platforms, enterprise SaaS applications, and modern application architectures.
• Knowledge of threat intelligence integration and threat informed defense methodologies.

Certifications

One or more of the following certifications are preferred:

• OSCP, Offensive Security Certified Professional
• OSCE, Offensive Security Certified Expert
• OSEP, Offensive Security Experienced Penetration Tester
• OSED, Offensive Security Exploit Developer
• CRTO, Certified Red Team Operator
• CRTP, Certified Red Team Professional
• GXPN, GIAC Exploit Researcher and Advanced Penetration Tester
• AI security, AI red teaming, or equivalent emerging cybersecurity certifications

Success Measures

• Improved detection and response effectiveness resulting from Red Team and Purple Team engagements.
• Demonstrated maturity and effectiveness of the enterprise Red Team program.
• Strong partnership with cybersecurity, technology, and business stakeholders.
• Measurable reduction in critical security gaps through threat informed testing and validation efforts.

Pay Transparency

The salary range for this position is from $170,000 to $230,000 per year, plus an opportunity to earn an annual discretionary bonus. Actual pay is based on various factors including but not limited to, the budget, work location, relevant skills, and experience.

We offer competitive pay, comprehensive medical, dental, and vision coverage, retirement benefits, maternity and paternity leave, flexible work arrangements, education reimbursement, wellness programs, and more. Citizens’ paid time off policy exceeds the mandatory paid sick or paid time away policies of local and state jurisdictions in the United States. For an overview of our benefits, visit our Careers site: https://jobs.citizensbank.com/benefits.

Equal Employment Opportunity

Citizens, its parent, subsidiaries, and related companies (Citizens) provide equal employment and advancement opportunities to all colleagues and applicants for employment without regard to age, ancestry, color, citizenship, physical or mental disability, perceived disability or history or record of a disability, ethnicity, gender, gender identity or expression, genetic information, genetic characteristic, marital or domestic partner status, victim of domestic violence, family status/parenthood, medical condition, military or veteran status, national origin, pregnancy/childbirth/lactation, colleague’s or a dependent’s reproductive health decision making, race, religion, sex, sexual orientation, or any other category protected by federal, state and/or local laws. At Citizens, we are committed to fostering an inclusive culture that enables all colleagues to bring their best selves to work every day and everyone is expected to be treated with respect and professionalism. Employment decisions are based solely on merit, qualifications, performance and capability.

Why Work for Us

At Citizens, you'll find a customer-centric culture built around helping our customers and giving back to our local communities. When you join our team, you are part of a supportive and collaborative workforce, with access to training and tools to accelerate your potential and maximize your career growth

Background Check

Any offer of employment is conditioned upon the candidate successfully passing a background check, which may include initial credit, motor vehicle record, public record, prior employment verification, and criminal background checks. Results of the background check are individually reviewed based upon legal requirements imposed by our regulators and with consideration of the nature and gravity of the background history and the job offered. Any offer of employment will include further information.