Supervisor, Red Team

Summary

The Supervisor, Red Team is responsible for leading and overseeing offensive security operations, penetration testing, vulnerability assessments, and adversarial simulation exercises to identify security weaknesses and strengthen the bank's overall cybersecurity posture. The role ensures that security testing activities are properly planned, authorized, executed, documented, and aligned with the bank's security policies, risk management framework, and applicable industry standards.

The position also provides technical guidance to Red Team members, coordinates with relevant IT and cybersecurity teams on remediation activities, and evaluates the effectiveness of existing security controls to enhance the bank's resilience against evolving cyber threats.

Duties and Responsibilities

• Lead the planning, coordination, and execution of authorized Red Team operations, penetration tests, and adversarial simulation exercises across the bank's approved technology environments.

• Prioritize security assessments based on system criticality, potential business impact, threat intelligence, and identified risk exposure.

• Define testing objectives, scope, methodologies, timelines, and rules of engagement in alignment with business priorities and security requirements.

• Oversee internal and external network penetration testing to identify and validate security vulnerabilities, misconfigurations, and potential attack paths.

• Coordinate with system owners and relevant technical teams to monitor remediation progress and verify corrective actions through retesting.

• Review technical findings, validate identified vulnerabilities, and ensure appropriate prioritization based on severity and business impact.

• Supervise web application, mobile application, API, and infrastructure security testing in accordance with recognized methodologies and industry best practices.

• Lead adversarial simulation exercises to assess the effectiveness of preventive, detective, and response security controls against relevant attack techniques.

• Collaborate with the Security Operations Center (SOC) and other cybersecurity teams to identify detection gaps and recommend improvements to monitoring and incident response capabilities.

• Apply relevant threat intelligence and recognized frameworks, including MITRE ATT&CK, to develop realistic and risk-based testing scenarios.

• Supervise, coach, and provide technical guidance to Red Team members to ensure the quality, accuracy, and effectiveness of security assessments.

• Support the professional development of team members and promote continuous improvement in offensive security capabilities.

• Review penetration-testing reports, technical evidence, and remediation recommendations before submission to management.

• Assign testing activities, monitor team performance, and ensure deliverables are completed within agreed timelines.

• Establish, maintain, and enforce Red Team procedures, ethical hacking guidelines, testing standards, and rules of engagement.

• Support internal and external audits, security reviews, and compliance assessments related to offensive security activities.

• Maintain proper documentation of assessment plans, findings, evidence, reports, and remediation status.

• Ensure all testing activities receive appropriate authorization and comply with approved scope, confidentiality requirements, change-management procedures, and bank security policies.

• Prepare and present Red Team assessment results, significant vulnerabilities, risk exposures, and remediation progress to relevant stakeholders and management.

• Monitor emerging vulnerabilities, offensive security techniques, and cyber threat trends to continuously enhance the bank's testing methodologies and security posture.

• Recommend improvements to security architecture, technical controls, and risk mitigation measures based on assessment outcomes.

Education

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field.

Experience

• Minimum 4-5 years of relevant experience in cybersecurity, penetration testing, vulnerability assessment, or offensive security.
• At least 2 years of experience in a supervisory, team leadership, or technical project leadership role.
• Experience conducting and coordinating penetration testing and adversarial simulation activities across enterprise IT environments.
• Experience in banking, financial services, or other regulated industries is an advantage.

Knowledge

• Strong knowledge of internal and external network penetration testing, vulnerability assessment, and offensive security methodologies.

• Practical understanding of web application, mobile application, API, network, and infrastructure security testing.
• Familiarity with Open-Source Intelligence (OSINT), attack-path analysis, and adversarial simulation techniques.
• Knowledge of recognized security frameworks and methodologies, including OWASP Top 10, NIST SP 800-115, MITRE ATT&CK, and Penetration Testing Execution Standard (PTES).
• Understanding of vulnerability prioritization, security risk assessment, remediation validation, and technical reporting.

Skills and Abilities

• Relevant certifications such as OSCP, CRTA, PWPA, eJPT, PJPT, PT1, CJCA, or equivalent offensive security qualifications are preferred.

• Advanced penetration-testing or Red Team certifications are an advantage.

Other Requirements

• Strong leadership, team coordination, and technical review capabilities.
• Excellent analytical, problem-solving, and decision-making skills.
• Effective communication and stakeholder management skills.
• Ability to translate technical findings into business risks and actionable recommendations.
• High standards of integrity, confidentiality, accountability, and professional ethics.