Manager, Offensive Security

About the role

Barracuda is seeking a Manager, Offensive Security to lead a team of cybersecurity engineers focused on threat detection and attack stimulation across a wide range of technologies, including SaaS, endpoint, network, and cloud platforms. In this role, you will play a critical part in driving detection innovation, engineering processes, and attack and defend lifecycle for Barracuda XDR. This is a unique opportunity to blend security operations, data engineering, detection engineering, offensive security and leadership in a global 24x7 Security Operations Center (SOC). You will work with over 50 different data sources and lead efforts aligned with the MITRE ATT&CK framework, while fostering collaboration between red, purple, green and blue teams to advance threat detection and response along with ensuring overall improvement and enhancement of Barracuda Security Operations Center.

Responsibilities

• Proactive Engineering & Detection Development: Lead and mentor a team of cybersecurity Engineers; Develop, test and tune detection rules for multiple attack vectors across cloud, network, and endpoint telemetry; Design and maintain CI/CD pipelines to version and deploy detection rules; Implement and manage the full lifecycle of SIEM detection rules; Foster collaboration between red and purple teams to drive offensive and defensive innovation; Create and execute sprint projects using Agile methodologies to improve SOC maturity and R&D efforts; Implement proactive threat hunting initiatives across customer networks; Guide and monitor your team through complex security incidents such as ransomware.
• Attack Operations & Adversary Simulation: Lead adversary simulation exercises and exploit research initiatives; Design and execute detection testing scenarios and breach simulations; Conduct tabletop exercises and kill chain rehearsals; Develop and manage an open-source red teaming repository for attacks and stimulations; Develop threat modeling frameworks and campaign replay scenarios; Conduct and manage live “attack and defend” exercises to test detection and response readiness.
• Threat Hunting & Proactive Detection: Implement proactive threat hunting initiatives across customer networks;