Lead Offensive Security & Red Team at SAP

Language

Location: Courbevoie, Île-de-France
Level: lead/mgmt
Posted: Sep 21, 2026

Summary from listing

The Head of Offensive Security & Red Team leads IDEMIA’s offensive security capabilities, including red teaming, penetration testing, adversary simulation, attack-path analysis, and continuous security validation across cloud, identity, applications, networks, data centers, and production environments. The role combines technical leadership, capability building, provider management, and the development of AI-enabled and agentic offensive security capabilities, while reporting to the VP IT Cybersecurity / CISO. It requires 6–10 years of relevant cybersecurity experience, strong offensive-security expertise, technical depth in at least two areas, automation and scripting skills, and the ability to translate findings into business risk.

Required Skills

Red teaming
Penetration testing
Adversary simulation
Attack-path analysis
Python
PowerShell
MITRE ATT&CK
Kubernetes
LLMs

Additional Information

Required Previous Experiences: 6–10 years of relevant cybersecurity experience, including substantial hands-on experience in offensive security, red teaming, penetration testing, adversary simulation, or security research.
Experience independently scoping, designing, and executing complex offensive-security engagements through remediation and retesting.
Experience with adversary-emulation tooling, offensive-security infrastructure, controlled laboratories, and testing automation.
Experience or interest in AI-assisted security testing, LLMs, tool-using agents, agentic workflows, or automated security research.
Preferred Qualifications: Experience in cloud-native, identity-centric, payment, telecom, data-center, or other business-critical environments.
Experience testing AI-enabled applications, RAG systems, LLMs, or autonomous agents.
Evidence of continuous technical learning through research, open-source contributions, CTFs, bug bounty, CVEs, publications, or security-community involvement.
Certifications such as OSCP, OSEP, OSCE3, CRTO, CRTE, GXPN, or GPEN are valued but not mandatory.
Translation Company Name: IDEMIA