Offensive Cyber Operations Red Team Lead

• Lead and execute full-scope Red Team engagements and adversary-emulation campaigns across network, identity, cloud, and human attack surfaces.
• Plan and manage Red Team operations, including scope definition, objectives, rules of engagement, operational constraints, and deconfliction.
• Design and execute campaign-style attack chains using adversary tactics, techniques, and procedures (TTPs), including assumed-breach and stealth intrusion scenarios.
• Perform and oversee advanced exploitation of enterprise networks, systems, Windows/Active Directory, identity systems, and cloud services.
• Evaluate and assess preventive and detective controls (e.g., EDR, SIEM, IAM, NAC) by analyzing telemetry and validating alerting/response workflows.
• Collaborate with Detection, Response, and Purple Team partners during live-fire and validation exercises.
• Identify systemic control gaps and end-to-end attack paths (not just isolated vulnerabilities) and translate business drivers into technical recommendations.
• Administer, coordinate, and implement vendor and OCO testing processes, ensuring adherence to procedures, policies, and regulatory frameworks.
• Guide cyber security decisions related to network design, cloud adoption, threat modeling, and new technology integration; evolve processes, automation, and monitoring using data analytics.
• Oversee evidence collection, attack-chain documentation, and artifact management; produce clear, executive-ready reports that communicate risk and recommendations to technical and non-technical stakeholders.
• Mentor, coach, and develop Red Team operators in tooling, tradecraft, and operational discipline; contribute to labs, tools, and training programs.
• Maintain relationships with partners across IT, business units, BISOs, ERMs, and other teams to ensure alignment and effective coordination; partner with leadership to shape Red Team strategy, maturity, and capability development.
• Monitor industry trends, business developments, and emerging threat actor techniques to continuously mature the OCO program and methodologies. Manage risk through procedural adherence, rapid issue resolution, and proper escalation and documentation of findings.

• Have at least seven (7) years of professional-level experience in offensive security, including one or more technical disciplines such as Penetration Testing, Red Teaming, Networking, Firewalls, Server Administration, Encryption, Cloud, Containers, Databases, or Software Development.
• Have at least two (2) or more years of experience as a penetration tester/red team tester, and proven experience leading complex security testing or adversary-emulation exercises.
• Possess hands-on, expert-level technical proficiency in at least one critical skill area, supported by relevant certifications.
• Hold (or be working toward) multiple professional or associate-level certifications relevant to the role; preferred offensive certifications include OSCP, OSEP, CRTO, GXPN (or equivalent).
• Demonstrate strong hands-on expertise in enterprise networks, Windows, Active Directory, and identity-based attacks.
• Demonstrate advanced understanding of adversarial tactics, techniques, and procedures (TTPs).
• Strong understanding of enterprise security controls, detection technologies, and incident response workflows; able to validate and communicate technical risk clearly at the executive and business level.

• Experience with cloud and container security (e.g., AWS, Azure, Kubernetes) and background collaborating in Purple Team operations.
• Be proficient with multiple open-source and commercial security tools (e.g., Nessus, Burp Suite, Metasploit, Nmap) and understand the strengths, weaknesses, configuration requirements, and troubleshooting needs of common security tooling.
• Have strong proficiency working with both UNIX-based and Microsoft operating systems, with deep systems engineering experience in at least one of them.
• Understand security guidelines such as NIST 800-53 and NIST 800-115.
• Demonstrate the ability to clearly articulate technical findings to both technical and non-technical audiences.
• Strong understanding of IT network architecture and cyber security fundamentals, enabling effective guidance for product enhancements and new designs.
• Ability to engage across a wide range of technologies and stay informed about evolving trends to support aggressive testing schedules.

Who We Are:
The Fountain Group is a nationwide staffing firm with over 80 Fortune 100-500 clients. Since 2001, TFG has maintained a consistent standard of excellence, and our work is broadly recognized every year through numerous industry performance awards. Our success is a team effort.
Browse our website below for additional information on our company.
The Fountain Group
3407 W Martin Luther King Jr. Dr. Tampa, FL 33607
“We work in Life Sciences, Clinical, Engineering, IT, and more. Above all, we specialize in people.”

By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at Privacy Policy

#LI-RM1