Director – Offensive Security & Assurance

Aon
Utah
Workplace: RemoteFull timeUSD 133,000 - 175,000 annuallyFunction: Executive & General ManagementExperience: 8+ yearsEducation: bachelorsSkills: ["Leadership","Mentorship","Communication","Risk reporting","Program leadership"]

Lead Aon’s global offensive security and security assurance capabilities within Proactive Threat Operations. Drive a continuous, threat-informed offensive validation program using adversary emulation, purple teaming, attack-path analysis, and control validation across endpoints, identity (Active Directory/Entra ID), cloud, SaaS, networks, applications, APIs, and browsers. Partner with security teams to ensure risks are validated, attack paths eliminated, detections strengthened, and remediation verified with evidence.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Aon
Aon
5 hours ago

Director – Offensive Security & Assurance

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 2 hours agoStatus: Live

Job Summary

Lead Aon’s global offensive security and security assurance capabilities within Proactive Threat Operations. Drive a continuous, threat-informed offensive validation program using adversary emulation, purple teaming, attack-path analysis, and control validation across endpoints, identity (Active Directory/Entra ID), cloud, SaaS, networks, applications, APIs, and browsers. Partner with security teams to ensure risks are validated, attack paths eliminated, detections strengthened, and remediation verified with evidence.
Location: Utah
Workplace: Remote
Employment Type: Full time
Job Function: Executive & General Management
Seniority: Director level

Key Responsibilities

  • •Lead the global Offensive Security & Assurance capability within Proactive Threat Operations and define offensive security strategy, operating model, priorities, standards, and roadmap.
  • •Evolve point-in-time penetration testing toward continuous adversary validation and recurring purple-team operations.
  • •Develop and maintain adversary emulation scenarios using threat intelligence and emerging techniques; plan, conduct, and oversee testing across enterprise attack paths.
  • •Connect offensive testing with AC3/SOC detection and response; improve telemetry, behaviors, techniques, and test evidence derived from offensive exercises.
  • •Recruit, develop, and mentor offensive security practitioners and manage internal testing and external penetration testing/red-team partners while reporting progress to senior leadership.

Pay and Benefits

Salary: USD 133,000 - 175,000 annually
Perks:401kEquityHealth InsuranceDentalVisionPaid LeaveLife InsuranceHsaTuition AssistanceAdoption AssistanceCommuter Benefits

Key Requirements

  • •8+ years of offensive security experience, including penetration testing, red teaming, or adversary emulation, leading complex security testing programs in large global environments.
  • •Experience building and/or maturing offensive security or red-team capabilities, including strategy, operating model, and technical roadmap.
  • •Deep technical expertise across endpoint security, identity and access management (Active Directory and Entra ID), cloud platforms (Azure, AWS, GCP), SaaS, enterprise networks, and web/API/browser attack techniques.
  • •Experience running purple-team exercises and collaborating with SOC, threat hunting, and detection engineering to validate and improve detections and response.
  • •Ability to design and execute attack-path analysis and control-validation campaigns, translate findings into remediation/architecture improvements, and manage offensive testing governance and third-party providers.
Experience:8+ yearsOffensive securityPenetration testingRed teamingThreat-informed securityPurple teaming
Education:Bachelor's in Computer Science
Skills:LeadershipMentorshipCommunicationRisk reportingProgram leadership
Certifications:OSCPOSEPOSCEGX-PNGX-RTACRESTCISSP
Tech Stack:Active DirectoryEntra IDAzureAWSGCPCloudSaaSNetworkWeb applicationsAPIsBrowserEndpoint securityMITRE ATT&CK

Company Brief

Aon
Global professional services firm providing risk, retirement, human resources, and insurance brokerage solutions to clients worldwide, including consulting, reinsurance, and data-driven risk management services.
Industry: Insurance
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: London, United Kingdom
Founded: 1982
Glassdoor
Glassdoor: 3.9
WebsiteLinkedInGlassdoor