Remote Red Team Lead: Adversary Emulation & Defense Leader

Sherwin-Williams Co.; Cleveland (OH); Remote; USD 150,000 - 210,000; Full time

Job summary

Sherwin-Williams Co. is seeking a Threat Management Red Team Lead to define, build, and lead enterprise adversary emulation initiatives. You will align strategy to business risk and threat intel while directing end-to-end attack simulations across the enterprise.

You will validate security controls against realistic scenarios, drive improvements in detection and response, and mentor Red Team operators in a remote capacity.

Qualifications

• Bachelor’s degree or 12+ years in IT/cybersecurity.
• 8+ years IT/Cybersecurity experience.
• Proven Red Team or adversary simulation leadership.
• Strong knowledge of adversary TTPs and MITRE ATT&CK.
• Experience coordinating SOC, Threat Intelligence, Detection Eng., App Security.
• Must be eligible to work in the United States without sponsorship.
• Must be at least eighteen years old.

Responsibilities

• Define and lead the enterprise adversary simulation strategy.
• Build, mature Red Team program, tooling, and engagement frameworks.
• Oversee planning and execution of complex attack scenarios.
• Validate effectiveness of preventive, detective, and response controls.
• Drive cross-team collaboration across SOC, Threat Intelligence, Detection Eng., App Security.
• Lead purple team exercises to strengthen detection and response.
• Ensure findings are tracked, prioritized by risk, remediated and retested.
• Translate threat intel and business risk into prioritized adversary scenarios.
• Deliver risk-based reporting and metrics to leadership.
• Define and track KPIs to measure program effectiveness.

Skills

Adversary emulation

MITRE ATT&CK

Red Team leadership

Cross-functional collaboration

Threat intelligence

Education

Bachelor’s Degree (or foreign equivalent)

Tools

OSCP

OSEP

CRTO

GXPN

GPEN

CISSP

Job description

Sherwin-Williams Co. is seeking a Threat Management Red Team Lead to define, build, and lead enterprise adversary emulation initiatives. You will align strategy to business risk and threat intel while directing end-to-end attack simulations across the enterprise.

You will validate security controls against realistic scenarios, drive improvements in detection and response, and mentor Red Team operators in a remote capacity.