Lead and execute authorized red team and adversary emulation operations across enterprise, cloud, identity, endpoint, and retail tech. Develop and operate C2 infrastructure and offensive tooling, research endpoint telemetry and evasion techniques, identify AD/cloud attack paths, partner with detection and response teams, map findings to MITRE ATT&CK, and translate results into prioritized remediation, reports, and executive summaries.

Support and implement enterprise identity, access, and cloud security solutions, focusing on Azure and Microsoft 365 administration, while ensuring compliance and security best practices.

Lead the development and execution of IT Operational Resilience, focusing on integration, improvement, governance, and cross-functional alignment to enhance business continuity and disaster recovery processes.