Remote Red Team Lead — Adversary Emulation & Defense

The Sherwin-Williams Company; Cleveland (OH); Remote; USD 150,000 - 190,000; Full time

Job summary

The Sherwin-Williams Company seeks a Red Team Lead to define and run the enterprise adversary emulation program. You will align strategy with business risk and threat intelligence, and oversee end-to-end attack simulations across the organization.

You will lead cross-functional collaboration with SOC, Threat Intelligence, Detection Engineering, and Application Security, maturing tooling, and delivering risk-based insights to leadership.

Qualifications

• Bachelor's Degree or 12+ years in IT/Business, as equivalent
• 8+ years IT/Cybersecurity experience
• Proven Red Team or adversary simulation leadership
• Deep knowledge of adversary TTPs and MITRE ATT&CK
• Experience planning and executing advanced red team operations
• Cross-functional coordination across SOC, Threat Intelligence, Detection Engineering and IR
• Strong enterprise security architecture understanding (identity, endpoints, networks, cloud)
• Experience with social engineering, lateral movement and ransomware scenarios
• Ability to translate technical findings into business risk

Responsibilities

• Define and lead enterprise adversary simulation strategy aligned to risk and threat intel
• Build and mature Red Team program, tooling and engagement frameworks
• Plan and execute complex attack scenarios across enterprise environments
• Validate effectiveness of preventive/detective/response controls
• Drive collaboration across SOC, Threat Intelligence, Detection Eng, App Security
• Lead purple team exercises to strengthen detection and response
• Ensure findings are tracked, prioritized by risk, remediated and retested
• Translate threat intel into prioritized adversary scenarios
• Deliver clear risk-based reporting to leadership
• Define and track KPIs to measure program effectiveness
• Oversee red team tooling and infrastructure
• Provide technical leadership and mentorship to Red Team operators
• Establish standards for tradecraft and documentation
• Continuously evaluate new tools and adversary tradecraft

Skills

Adversary emulation

Leadership

Cross-functional collaboration

Threat intelligence

Communication

Mentorship

Education

Bachelor's degree / 12+ years experience

Security certifications (OSCP, OSEP, GPEN, CISSP, etc.)

8+ years IT/Cybersecurity experience

Red Team / adversary program leadership

MITRE ATT&CK expertise

Enterprise security architecture knowledge

Tools

Sliver

Cobalt Strike

Mythic

BloodHound

Impacket

Mimikatz

Job description

The Sherwin-Williams Company seeks a Red Team Lead to define and run the enterprise adversary emulation program. You will align strategy with business risk and threat intelligence, and oversee end-to-end attack simulations across the organization.

You will lead cross-functional collaboration with SOC, Threat Intelligence, Detection Engineering, and Application Security, maturing tooling, and delivering risk-based insights to leadership.