Cybersecurity Lead

Cybersecurity Lead who will act as a hands-on technical leader uniting offensive and defensive security operations to continually improve detection, response, and recovery capabilities. Lead Blue Team tool management (SIEM, EDR/XDR, SOAR), coordinate Red Team simulations to measure and improve defensive posture, and translate findings into actionable improvements. Responsibilities include managing detection pipelines, incident response playbooks, threat-hunting, alert triage, and collaboration with DevOps/infrastructure to embed security monitoring in hybrid environments. Design and run adversary emulation exercises (phishing, privilege escalation, persistence, lateral movement), develop and maintain custom attacker scripts, produce post-exercise reports with recommendations, and serve as a technical escalation point for complex investigations while communicating risk reductions to executives. Plan and execute simulations to validate detection coverage and incident response readiness; drive continuous improvement of detection content and control validation.