Director, Red Team

Our team members are at the heart of everything we do. At Cencora we are united in our responsibility to create healthier futures and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health come join our innovative company and help us improve the lives of people and animals everywhere. Apply today!

Job Details

The Director of Red Team is a senior cybersecurity leadership role responsible for directing offensive security operations managing the internal red team and overseeing external vendor engagements for advanced adversary simulations and security assessments.

This position sits at the intersection of technical offensive expertise strategic planning and operational leadership. The ideal candidate will build empower and guide highly skilled offensive security analysts while establishing partnerships across technology and operational business teams to scale testing capabilities and mature security posture across complex enterprise environments.

RESPONSIBILITIES:

• Manage and mature the Red Team strategy aligning the overall vision and roadmap to business risks and posture.
• Maintain and enforce clear Rules of Engagement standard operating procedures and safety controls to ensure adversary simulations test controls effectively without degrading production stability.
• Align testing methodologies with threat intelligence frameworks to emulate threat actors and emerging tactics techniques and procedures relevant to business risk profiles.
• Lead mentor and mature a team of high-performing red team engineers and offensive security operators fostering continuous learning and skill development.
• Balance team bandwidth between complex long-term targeted campaigns specialized security assessments and research/tooling development.
• Select and manage third-party offensive security providers for external assessments scoping complex engagements and statement of work deliverables. Validate that vendor findings maintain high technical standards and actionable quality.
• Integrate third-party findings into internal tracking mechanisms to ensure unified reporting and remediation.
• Partner closely with detection & response operations threat intelligence and security engineering to ensure red team findings drive tangible improvements in preventative and detective controls.
• Translate complex exploit chains and tactical findings into clear risk impact narratives for executive leadership and business unit leaders.

EDUCATION & QUALIFICATIONS:

• Bachelors degree in Cybersecurity Computer Science Information Systems or equivalent work experience
• 8 years of progressive experience in cybersecurity with at least 6 years dedicated to offensive security role in red team penetration testing adversary emulation or exploit development.
• 3 years leading offensive security teams or programs with demonstrated success building and maturing the function at enterprise scale.
• Demonstrated experience planning and leading full-scope objective-based red team operations against mature monitored environments.
• Strong command of adversary tradecraft and the detection surfaces it creates including how modern EDR identity protection and cloud logging observe attacker activity.
• Practical fluency with MITRE ATT&CK and threat intelligence and the ability to translate actor behavior into realistic emulation plans.
• Excellent written and verbal communication skills with proven ability to deliver difficult findings without damaging partnership and to brief executives credibly.

PREFERRED CERTIFICATIONS:

• OSCP Offensive Security Certified Professional
• OSEP Experienced Penetration Tester
• OSED Exploit Developer
• GIAC GXPN Exploit Researcher and Advanced Penetration Tester
• GIAC GPEN Penetration Tester
• GIAC GRTP Red Team Professional
• GIAC GCPN Cloud Penetration Tester
• GIAC GWAPT Web Application Penetration Tester

Bachelors degree in cyber security computer science information technology information systems or a related field or equivalent experience degree in cyber security computer science information technology information systems business administration or a related field or equivalent experience preferred.10 years of experience in cyber threat intelligence cyber security security operations incident response threat analysis or a related field required.5 years of experience in a management capacity in Certified Information Systems Security Professional (CISSP) or equivalent certification in Certified Information Security Manager (CISM) or equivalent certification preferred.

What Cencora offers

We provide compensation benefits and resources that enable a highly inclusive culture and support our team members ability to live with purpose every addition to traditional offerings like medical dental and vision care we also provide a comprehensive suite of benefits that focus on the physical emotional financial and social aspects of wellness. This encompasses support for working families which may include backup dependent care adoption assistance infertility coverage family building support behavioral health solutions paid parental leave and paid caregiver leave. To encourage your personal growth we also offer a variety of training programs professional development resources and opportunities to participate in mentorship programs employee resource groups volunteer activities and much more. For details visit <