Cyber Security Threat Management Associate Director

Are you ready to make an impact at DTCC

Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development At DTCC, we are at the forefront of innovation in the financial markets. We are committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve.

Pay and Benefits:

• Competitive compensation, including base pay and annual incentive
• Comprehensive health and life insurance and well-being benefits, based on location
• Pension / Retirement benefits
• Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
• DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee).

The Impact you will have in this role:

The Associate Director of Breach and Attack Simulation (BAS) lead the strategy, design, execution, and continuous maturation of DTCC's adversary simulation and security control validation program. This role combines offensive security expertise, leadership, and cross-functional coordination to emulate real-world threat behaviors, validate preventive and detective controls, identify detection and response gaps, and drive measurable improvements in cyber resilience across on-premises, cloud, and hybrid environments.

Your Primary Responsibilities:

• Lead the Breach and Attack Simulation program, including strategy, roadmap, operating model, execution standards, and measurable success criteria.
• Design and execute realistic adversary emulation scenarios that validate security controls against current threat behaviors and organizational risk priorities.
• Map simulation activities and findings to MITRE ATT&CK and other relevant frameworks to support consistent reporting, prioritization, and control coverage analysis.
• Partner with SIEM, SOC, threat intelligence, endpoint, network, cloud, and security engineering teams to improve detection coverage, response readiness, and control effectiveness.
• Identify, assess, document, and track remediation of control gaps discovered through BAS exercises, red team collaboration, purple team engagements, and continuous validation activities.
• Oversee BAS platform use-cases, automation, scenario development, execution scheduling, test safety controls, and evidence collection.
• Translate threat intelligence, business risks, and control requirements into repeatable simulation scenarios that safely test enterprise defenses.
• Develop executive-ready reports, metrics, and risk narratives that communicate control performance, detection gaps, remediation progress, and cyber resilience improvements.
• Establish actionable metrics and risk thresholds to measure BAS program effectiveness, detection maturity, control coverage, and remediation outcomes.
• Coordinate purple team activities to ensure simulation findings are converted into improved detections, response playbooks, tuning actions, and control enhancements.
• Provide leadership, coaching, and technical direction to BAS engineers and cross-functional contributors supporting adversary simulation activities.
• Manage stakeholder engagement, including requirements gathering, exercise scoping, risk approvals, communications, and post-exercise readouts.
• Ensure simulation activities are conducted safely, ethically, and in alignment with approved rules of engagement, change management, and operational risk requirements.
• Build strong relationships across technology, cybersecurity, risk, compliance, audit, and business stakeholders to drive remediation accountability and program adoption.
• Support audit, regulatory, and control assurance requests by providing evidence of security control validation, remediation tracking, and program governance.
• Continuously improve BAS processes, procedures, playbooks, templates, and reporting standards to increase repeatability, scalability, and operational maturity.
• Stay current with adversary tactics, techniques, and procedures, emerging attack trends, and BAS industry practices to inform program priorities.
• Contribute to cybersecurity strategy, control lifecycle activities, and enterprise resilience initiatives related to threat-informed defense validation.
• Fulfill additional cybersecurity engineering, threat defense, control validation, and special project responsibilities as assigned.

Qualifications:

• Minimum of 6 years of related experience
• Bachelor's degree preferred or equivalent experience

Talents Needed for Success:

• At least 10 years of cybersecurity experience, including offensive security, security engineering, incident response, detection engineering, or control validation responsibilities.
• Minimum 5 years of leadership or program ownership experience in breach and attack simulation, red team, purple team, threat defense, or security control assurance programs.
• Bachelor's degree in computer science, cybersecurity, information technology, engineering, or a related discipline equivalent experience may be considered.
• Relevant certifications such as CISSP, OSCP, OSCE, GPEN, GCIH, GCIA, CRTO, CEH, CISM, or cloud security certifications are preferred.
• Deep expertise in Breach and Attack Simulation, adversary emulation, red team operations, purple team collaboration, and continuous security control validation.
• Strong understanding of MITRE ATT&CK, cyber kill chain concepts, threat-informed defense, detection engineering, and control coverage assessment.
• Hands-on experience with BAS platforms, SIEM technologies, EDR/XDR tools, SOAR workflows, vulnerability management, cloud security, and security telemetry sources.
• Knowledge of attacker tactics, techniques, and procedures across identity, endpoint, network, application, cloud, and data platforms.
• Ability to write and review test plans, rules of engagement, attack narratives, remediation plans, executive summaries, technical reports, and control assurance evidence.
• Strong leadership, stakeholder management, communication, project management, and executive presentation skills.

Our Risk Management teams work to protect the safety and soundness of our systems and are responsible for identifying, managing, measuring and mitigating a spectrum of key risk types including credit, market, liquidity, systemic, operational and technology in all existing and new products, activities, processes and systems.