Head of Threat Hunting & Adversarial Simulation

Overview

We are looking for an experienced cyber security leader to direct and manage our client's threat hunting and adversarial simulation operations.

This role combines strategic leadership with practical expertise to establish and lead a proactive security team, focused on uncovering hidden threats and simulating sophisticated attacker behaviours to enhance overall cyber resilience.

Responsibilities

• Lead the development and delivery of threat hunting activities to detect and respond to advanced cyber threats across all platforms.
  
  
• Manage adversarial simulation exercises, including red team operations, to thoroughly test and improve security defences and response effectiveness.
  
  
• Build, mentor, and lead a high-performing team specialising in threat detection, attacker emulation, and vulnerability assessment.
  
  
• Collaborate with security operations, incident response, and risk management teams to enhance detection capabilities, streamline response processes, and remediate vulnerabilities.
  
  
• Incorporate up-to-date threat intelligence and attacker tactics into hunting hypotheses and simulation scenarios that reflect current, real-world threats.
  
  
• Promote continuous improvement through automation, custom tool development, and innovative operational tactics.
  
  
• Provide senior management and stakeholders with clear, concise reports on findings, risk assessments, and recommended mitigations.
  
  
• Keep abreast of emerging cybersecurity threats, frameworks, and methodologies to ensure the programme remains effective and forward-looking.
  
  

Qualifications & Experience

• Degree in Computer Science, Cyber Security, or a related discipline, or equivalent practical experience.
  
  
• Minimum of 15 years’ experience in cyber security, including at least 5 years in a leadership position focused on threat hunting, red teaming, or offensive security.
  
  
• Strong technical knowledge of network, endpoint, and cloud security tools used for threat detection and adversary simulation.
  
  
• Thorough understanding of attacker methodologies and frameworks such as MITRE ATT&CK and the Cyber Kill Chain.
  
  
• Proficient in scripting or automation languages such as Python or PowerShell to augment operational capabilities.
  
  
• Relevant industry certifications (e.g. OSCP, GCTI, GIAC) are desirable but not essential.
  
  
• Excellent communication skills with the ability to engage and influence both technical teams and executive management.
  
  

Seniority level

• Director

Employment type

• Full-time

Job function

• Information Technology

Industries

• Technology
• Information and Media
• Staffing and Recruiting