{"id":1220330,"url":"https://alion.io/job/dtcc-cyber-security-threat-management-associate-director-2","title":"Cyber Security Threat Management Associate Director","company":{"id":1759477,"name":"Depository Trust & Clearing Corporation","domain":"dtcc.com","url":"https://alion.io/company/dtcc-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":78,"open_postings":90,"ghost_share":0.011,"stale_share":0.811,"repost_share":0.056,"time_to_fill_p50_days":35,"computed_at":"2026-11-05T05:54:30Z"}},"role":"Security","role_family":"Security","seniority":"head","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chennai, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":23000,"max_usd":56000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":291},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Cyber Kill Chain","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Red Teaming","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-07-20T07:44:12Z","employer_posted_date":"2026-07-20","last_verified_at":"2026-11-06T03:26:08Z","board_verified":true,"closed_at":null,"days_open":108,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":107},"description":"Are you ready to make an impact at DTCC?\nDo you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We are committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve.\nPay and Benefits:\nCompetitive compensation, including base pay and annual incentive\nComprehensive health and life insurance and well-being benefits, based on location\nPension / Retirement benefits\nPaid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.\nDTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee). \nThe Impact you will have in this role:\nThe Associate Director of Breach and Attack Simulation (BAS) lead the strategy, design, execution, and continuous maturation of DTCC’s adversary simulation and security control validation program. This role combines offensive security expertise, leadership, and cross-functional coordination to emulate real-world threat behaviors, validate preventive and detective controls, identify detection and response gaps, and drive measurable improvements in cyber resilience across on-premises, cloud, and hybrid environments.\nYour Primary Responsibilities:\nLead the Breach and Attack Simulation program, including strategy, roadmap, operating model, execution standards, and measurable success criteria.\nDesign and execute realistic adversary emulation scenarios that validate security controls against current threat behaviors and organizational risk priorities.\nMap simulation activities and findings to MITRE ATT&CK and other relevant frameworks to support consistent reporting, prioritization, and control coverage analysis.\nPartner with SIEM, SOC, threat intelligence, endpoint, network, cloud, and security engineering teams to improve detection coverage, response readiness, and control effectiveness.\nIdentify, assess, document, and track remediation of control gaps discovered through BAS exercises, red team collaboration, purple team engagements, and continuous validation activities.\nOversee BAS platform use-cases, automation, scenario development, execution scheduling, test safety controls, and evidence collection.\nTranslate threat intelligence, business risks, and control requirements into repeatable simulation scenarios that safely test enterprise defenses.\nDevelop executive-ready reports, metrics, and risk narratives that communicate control performance, detection gaps, remediation progress, and cyber resilience improvements.\nEstablish actionable metrics and risk thresholds to measure BAS program effectiveness, detection maturity, control coverage, and remediation outcomes.\nCoordinate purple team activities to ensure simulation findings are converted into improved detections, response playbooks, tuning actions, and control enhancements.\nProvide leadership, coaching, and technical direction to BAS engineers and cross-functional contributors supporting adversary simulation activities.\nManage stakeholder engagement, including requirements gathering, exercise scoping, risk approvals, communications, and post-exercise readouts.\nEnsure simulation activities are conducted safely, ethically, and in alignment with approved rules of engagement, change management, and operational risk requirements.\nBuild strong relationships across technology, cybersecurity, risk, compliance, audit, and business stakeholders to drive remediation accountability and program adoption.\nSupport audit, regulatory, and control assurance requests by providing evidence of security control validation, remediation tracking, and program governance.\nContinuously improve BAS processes, procedures, playbooks, templates, and reporting standards to increase repeatability, scalability, and operational maturity.\nStay current with adversary tactics, techniques, and procedures, emerging attack trends, and BAS industry practices to inform program priorities.\nContribute to cybersecurity strategy, control lifecycle activities, and enterprise resilience initiatives related to threat-informed defense validation.\nFulfill additional cybersecurity engineering, threat defense, control validation, and special project responsibilities as assigned.\nQualifications:\nMinimum of 6 years of related experience\nBachelor's degree preferred or equivalent experience\nTalents Needed for Success:\nAt least 10 years of cybersecurity experience, including offensive security, security engineering, incident response, detection engineering, or control validation responsibilities.\nMinimum 5 years of leadership or program ownership experience in breach and attack simulation, red team, purple team, threat defense, or security control assurance programs.\nBachelor’s degree in computer science, cybersecurity, information technology, engineering, or a related discipline; equivalent experience may be considered.\nRelevant certifications such as CISSP, OSCP, OSCE, GPEN, GCIH, GCIA, CRTO, CEH, CISM, or cloud security certifications are preferred.\nDeep expertise in Breach and Attack Simulation, adversary emulation, red team operations, purple team collaboration, and continuous security control validation.\nStrong understanding of MITRE ATT&CK, cyber kill chain concepts, threat-informed defense, detection engineering, and control coverage assessment.\nHands-on experience with BAS platforms, SIEM technologies, EDR/XDR tools, SOAR workflows, vulnerability management, cloud security, and security telemetry sources.\nKnowledge of attacker tactics, techniques, and procedures across identity, endpoint, network, application, cloud, and data platforms.\nAbility to write and review test plans, rules of engagement, attack narratives, remediation plans, executive summaries, technical reports, and control assurance evidence.\nStrong leadership, stakeholder management, communication, project management, and executive presentation skills.\nActual salary is determined based on the role, location, individual experience, skills, and other considerations.We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.","description_format":"text","description_chars":6922,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":5,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Life insurance","Professional development"],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Penetration Testing","Custody & Fund Administration"],"lifecycle":[{"event":"open","at":"2026-09-25T11:46:11Z"}],"visa":[],"liveness":{"score":14,"band":"cold","label":"Long shot","p_open":1,"p_active":0.502,"p_room":0.28,"age_days":107,"expected_fill_days":35,"reasons":["conf:1","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-11-05T05:54:30Z"},"pay":null,"html_url":"https://alion.io/job/dtcc-cyber-security-threat-management-associate-director-2","json_url":"https://alion.io/job/dtcc-cyber-security-threat-management-associate-director-2.json","meta":{"generated_at":"2026-11-06T05:43:24Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10079,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1759477},"rest":"https://alion.io/mcp/rest/get_company?id=1759477"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdtcc-cyber-security-threat-management-associate-director-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdtcc-cyber-security-threat-management-associate-director-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdtcc-cyber-security-threat-management-associate-director-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dtcc-cyber-security-threat-management-associate-director-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdtcc-cyber-security-threat-management-associate-director-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1220330}},{"tool":"search_jobs","arguments":{"company":"dtcc.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1220330},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}