Security Manager

Position Summary:

We are looking for a seasoned Security Lead with hands-on experience in both Blue Team (defensive security operations) and Red Team (offensive security testing) domains. This role demands a strategic thinker who can lead threat detection, incident response, and threat hunting efforts while also planning and executing penetration tests and adversary simulations across web, infrastructure, thick client, and API layers.

Key job responsibilities:

• Develop and implement a holistic cybersecurity strategy aligned with business objectives.
• Lead cross-functional security teams across Blue and Red Team operations.
• Report security posture and risk metrics to senior leadership and stakeholders.
• Manage SOC operations including SIEM (e.g., Splunk, Elastic), SOAR, and EDR/XDR platforms.
• Conduct proactive threat hunting and continuous monitoring.
• Lead incident response, forensic investigations, and root cause analysis.
• Optimize detection rules and playbooks for evolving threats.
• Perform penetration testing across:
  • Web applications
  • Infrastructure (internal/external)
  • Thick client applications
  • APIs
• Conduct Red Team activities including adversary emulation and social engineering.
• Develop custom tools/scripts to simulate threat actor TTPs (aligned with MITRE ATT&CK).
• Collaborate with Blue Team to improve detection and response based on Red Team findings.
• Facilitate Purple Team exercises to validate detection and response capabilities.
• Bridge gaps between offensive and defensive teams to enhance overall security maturity.
• Evaluate and implement emerging technologies (AI/ML-based threat detection, blockchain for data integrity).
• Stay ahead of APTs and evolving attack vectors through continuous learning and tool development.