Director – Offensive Security & Assurance

Partner with Threat Intelligence to translate adversary activity into realistic offensive testing scenarios.

Partner with Threat Hunting to identify hypotheses and attack paths that warrant proactive validation.

Partner with Vulnerability & Exposure Management to determine whether vulnerabilities and exposures are actually exploitable in Aon’s environment.

Validate whether remediation actions and compensating controls meaningfully eliminate identified attack paths.

Require retesting and technical evidence before material offensive‑security findings are considered closed.

Identify opportunities to eliminate attack paths through architecture, configuration, identity, endpoint, cloud, network, or application control changes.

Establish continuous control‑validation exercises around Aon’s highest‑risk attack scenarios.

Develop repeatable adversary‑emulation playbooks mapped to MITRE ATT&CK and observed threat behavior.

Improve detection engineering by providing AC3/SOC with telemetry, behaviors, techniques, and test evidence derived from offensive exercises.

Collaborate with Applied Security Research to develop offensive tooling, automation, testing frameworks, and novel security‑assessment techniques.

Maintain appropriate testing governance, authorization processes, safety controls, and rules of engagement for offensive activity.

Manage internal testing capabilities and external penetration‑testing/red‑team partners where required, ensuring third‑party assessments supplement internal capabilities rather than serving as the primary operating model.

Provide senior leadership with clear, concise reporting on exploitable risk, defensive effectiveness, remediation progress, and systemic control weaknesses.

Recruit, develop, and mentor offensive security practitioners and build deep technical capability within the team.

How This Opportunity Is Different This is more than a traditional offensive security leadership role.

You'll lead the evolution of Aon's global offensive security program, moving beyond point-in-time assessments to continuous adversary validation, purple teaming, and attack-path elimination.

Working alongside leaders across Threat Intelligence, SOC, Security Engineering, Cloud, Identity, and Application Security, you'll directly influence how Aon identifies, validates, and reduces cyber risk at scale while building a world-class team and capability.

Skills and Experience Extensive experience (typically 8+ years) in offensive security, penetration testing, red teaming, or adversary emulation, with a strong track record leading complex security testing programs in large, global environments.

Demonstrated experience building and/or maturing offensive security or red‑team capabilities, including strategy, operating model, and technical roadmap.

Deep technical expertise across several of the following domains: endpoint security, identity and access management (including Active Directory and Entra ID), cloud platforms (e.g., Azure, AWS, GCP), SaaS, enterprise networks, web and API applications, and browser‑based attack techniques.

Strong familiarity with threat‑informed defense approaches and frameworks such as MITRE ATT&CK, plus experience incorporating threat intelligence into offensive testing.

Proven experience running purple‑team exercises and collaborating closely with SOC, threat hunting, and detection engineering teams to validate and improve detections and response.