Director, Red Team

Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere.

The Director of Red Team is a senior cybersecurity leadership role responsible for directing offensive security operations, managing the internal red team, and overseeing external vendor engagements for advanced adversary simulations and security assessments. This position sits at the intersection of technical offensive expertise, strategic planning, and operational leadership.

The ideal candidate will build, empower, and guide highly skilled offensive security analysts while establishing partnerships across technology and operational business teams to scale testing capabilities and mature security posture across complex enterprise environments.

• Manage and mature the Red Team strategy, aligning the overall vision and roadmap to business risks and posture.
• Maintain and enforce clear Rules of Engagement, standard operating procedures, and safety controls to ensure adversary simulations test controls effectively without degrading production stability.
• Align testing methodologies with threat intelligence frameworks to emulate threat actors and emerging tactics, techniques, and procedures relevant to business risk profiles.
• Lead, mentor, and mature a team of high-performing red team engineers and offensive security operators, fostering continuous learning and skill development.
• Balance team bandwidth between complex, long-term targeted campaigns, specialized security assessments, and research/tooling development.
• Select and manage third-party offensive security providers for external assessments, scoping complex engagements and statement of work deliverables.
• Validate that vendor findings maintain high technical standards and actionable quality.
• Integrate third-party findings into internal tracking mechanisms to ensure unified reporting and remediation.
• Partner closely with detection & response operations, threat intelligence, and security engineering to ensure red team findings drive tangible improvements in preventative and detective controls.
• Translate complex exploit chains and tactical findings into clear risk impact narratives for executive leadership and business unit leaders.

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or equivalent work experience.

8+ years of progressive experience in cybersecurity, with at least 6 years dedicated to offensive security role in red team, penetration testing, adversary emulation, or exploit development.

3+ years leading offensive security teams or programs, with demonstrated success building and maturing the function at enterprise scale.

Demonstrated experience planning and leading full-scope, objective-based red team operations against mature, monitored environments.

Strong command of adversary tradecraft and the detection surfaces it creates, including how modern EDR, identity protection, and cloud logging observe attacker activity.

Practical fluency with MITRE ATT&CK and threat intelligence, and the ability to translate actor behavior into realistic emulation plans.

Excellent written and verbal communication skills, with proven ability to deliver difficult findings without damaging partnership, and to brief executives credibly.

OSCP — Offensive Security Certified Professional

OSEP — Experienced Penetration Tester

OSED — Exploit Developer

GIAC GXPN — Exploit Researcher and Advanced Penetration…