[Hiring] Adversary Intelligence Manager @SailPoint

Role Description

SailPoint’s Cybersecurity organization is seeking an Adversary Intelligence Manager with a passion for cybersecurity and protecting the organization. In a strategic move to elevate our Cyber Defense Operations, we are combining our Red Team and Cyber Threat Intelligence (CTI) functions into a single, unified Adversary Intelligence team. This team will strategically sit adjacent to our Security Operations Center (SOC) within the Cyber Defense Operations org. The successful candidate will lead this newly combined organization, uplifting our offensive and intelligence capabilities to continually test the security of our products, enterprise, and response readiness.

This new leader will partner closely with our Security Operations Center (SOC) to drive threat-informed defensive measures and ensure seamless collaboration across our Cyber Defense Operations organization. We’re seeking a candidate with proven technical capabilities who can work on both the enterprise and application sides of the house, while pushing the boundaries of innovation. A key focus for this role will be pioneering the use of AI and agentic capabilities to automate, scale, and enhance adversary emulation, threat hunting, and intelligence analysis.

Our new Adversary Intelligence Manager will embrace the opportunity to work across diverse platforms and will play a key role in shaping our future security posture. They’ll work with an established team of talented and dedicated teammates, guiding both emerging and established talent. They’ll naturally embody the 4 I’s at SailPoint (Individual, Impact, Innovation, and Integrity), embrace new challenges, and be a positive contributor to an already excellent work culture and environment.

This is a challenging and impactful role where you will have the opportunity to work with both internal and external stakeholders, including our fantastic colleagues in IT, DevOps, Product Engineering, Security Engineering, and the wider Cyber Security team.

This role reports directly to the Sr. Director of Cyber Defense Operations and can be remote or based in Austin, TX.

Responsibilities:

• Lead Unified Program: Direct the unified intelligence collection, analysis, and adversary emulation programs, ensuring CTI directly informs and shapes targeted red team campaigns.
• Pioneer AI & Agentic Innovation: Architect and implement AI-driven and agentic automation workflows to scale threat intelligence collection, synthesize unstructured threat data, and dynamically execute emulation playbooks.
• SOC Partnership & Purple Teaming: Co-design collaborative purple-team exercises and continuous feedback loops with the SOC and Attack Surface Management (ASM) teams to rapidly translate offensive findings into robust detection engineering rules or prevention strategies.
• Strategic Risk Enumeration: Translate complex offensive testing results and emerging threat intelligence into strategic risk profiles and actionable, executive-level recommendations for business leaders.
• Team Leadership & Mentorship: Guide, mentor, and develop a diverse team of senior offensive security engineers and threat intelligence analysts, fostering a collaborative culture across historically distinct disciplines.
• Advanced Tool Development: Oversee the innovation of custom tools, techniques, and APIs to automate data ingestion, intelligence reporting, and dynamic adversary emulation.
• Executive Briefings: Present high-impact threat briefings, risk assessments, and incident post-mortems to cybersecurity leadership and broader enterprise stakeholders.

Qualifications

• Meet FedRAMP access requirements.
• 8–10 years of experience in cybersecurity, with at least 4 years managing or leading blended threat intelligence and offensive security (Red Team / Purple Team) operations.
• AI/Automation Acumen: Practical exposure to or strong conceptual understanding of integrating Generative AI, Large Language Models (LLMs), or agentic frameworks into cybersecurity workflows.
• SOC & Defensive Collaboration: Proven track record of partnering with SOC, incident response, or detection engineering teams to improve overall defensive telemetry and detection maturity.
• Technical Expertise: Deep technical mastery across attack simulation frameworks, commercial/open-source threat intelligence platforms (TIPs), and hands-on scripting/custom tool development.
• Strong leadership, communication, and program management abilities, with a history of building high-performing, cross-functional teams.
• Certifications: CISSP, OSCE/OSEP, GREM, GCTI, or equivalent demonstrable industry expertise.

Benefits

• Health and wellness coverage: Medical, dental, and vision insurance
• Disability coverage: Short-term and long-term disability
• Life protection: Life insurance and Accidental Death & Dismemberment (AD&D)
• Additional life coverage options: Supplemental life insurance for employees, spouses, and children
• Flexible spending accounts for health care, and dependent care; limited purpose flexible spending account
• Financial security: 401(k) Savings and Investment Plan with company matching
• Time off benefits: Flexible vacation policy
• Holidays: 8 paid holidays annually
• Sick leave
• Parental support: Paid parental leave
• Employee Assistance Program (EAP) and Care Counselors
• Voluntary benefits: Legal Assistance, Critical Illness, Accident, Hospital Indemnity and Pet Insurance options
• Health Savings Account (HSA) with employer contribution