Primary Accountabilities:
● Provide guidance and mentorship to team members, fostering professional development and technical excellence.
● Define and track performance metrics and KPIs to measure program effectiveness and drive continuous improvement.
● Develop and maintain a culture of innovation, continuous learning, and proactive security research.
● Coordinate cross-functional collaboration with other security teams (AppSec, SOC, Infrastructure, GRC) to integrate ARET insights into operational security practices.
● Manage team budgets, resource allocation, and vendor relationships for ARET services and tools.
● Develop and administer training and qualification certification for ARET functional roles.
● Provide effective communications about research findings, threat intelligence, and security concerns to stakeholders across the organization.
● Develop and execute strategic roadmaps for cyber threat intelligence, AI security, product security, adversarial emulation, and security tool development programs aligned with organizational risk tolerance and business objectives.
● Identify and assess emerging threats, attack techniques, and security technologies that may impact Inmar's security posture.
● Establish and maintain the organization's AI security program, ensuring responsible AI development practices and protection against AI-specific threats, such as prompt injection, model poisoning, and adversarial attacks.
● Define and mature the product security program, establishing secure development lifecycle practices, third-party component risk management, and product vulnerability disclosure processes.
● Champion offensive security capabilities through adversarial emulation and penetration testing programs that validate security controls and identify gaps before adversaries can exploit them.
● Drive automation and efficiency through strategic security tool development initiatives that enhance security operations and reduce manual effort.
● Engage with industry peers, threat intelligence sharing communities (ISACs/ISAOs), and research organizations to stay current with emerging threats and defensive techniques.
● Provide strategic input to executive leadership on emerging threats, security trends, and recommended investments in security capabilities.
● Oversee the development and maintenance of cyber threat intelligence collection, analysis, and dissemination capabilities.
● Ensure threat intelligence feeds, indicators of compromise (IOCs), and threat actor profiles are integrated into security monitoring and detection systems.
● Provide technical oversight for AI/ML security assessments, including model security testing, data privacy validation, and AI risk assessments. Review and approve product security assessments, threat models, and secure design recommendations for internal products and third-party solutions.
● Ensure adversarial emulation and penetration testing activities follow industry best practices (MITRE ATT&CK, PTES) and provide actionable remediation guidance.
● Oversee the development of security automation tools, scripts, and integrations that enhance security operations efficiency.
● Stay current with vulnerability research, exploit techniques, and defensive technologies relevant to Inmar's technology stack.
● Maintain awareness of applicable regulations and compliance requirements affecting threat intelligence, AI security, and product security (e.g., GDPR, CPRA, AI Act, executive orders on AI).
● Coordinate incident response support from ARET team members during security incidents, providing threat intelligence, forensic analysis, and remediation guidance.
● Manage vulnerability disclosure processes for Inmar products, including coordinated disclosure with external researchers where relevant.
● Ensure timely delivery of threat intelligence reports, product security assessments, penetration test reports, and research findings to stakeholders.
● Track and report on ARET program metrics including threat intelligence coverage, AI security assessments completed, product security reviews, penetration tests conducted, and automation tools deployed.
● Maintain documentation of ARET processes, methodologies, and standard operating procedures.
● Ensure secure handling of sensitive threat intelligence, vulnerability data, and penetration test results.
Required Qualifications:
● Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field; Master's degree preferred.
● 8+ years of experience in cybersecurity.
● Deep expertise in at least three of the following domains: cyber threat intelligence, AI/ML security, product security, penetration testing/red teaming, or security tool development.
● Strong understanding of threat actor tactics, techniques, and procedures (TTPs) and frameworks such as MITRE ATT&CK.
● Experience with security assessment methodologies including threat modeling, penetration testing, and vulnerability research.
● Knowledge of AI/ML security risks, vulnerabilities, and mitigation strategies. Understanding of secure software development lifecycle (SSDLC) and product security best practices.
● Excellent written and verbal communication skills with ability to present complex technical topics to executive audiences.
● Experience with security tool development, automation, and scripting (Python, PowerShell, or similar).
● Strong project management skills with ability to manage multiple concurrent initiatives.
Preferred Qualifications:
● Demonstrated experience building and leading high-performing technical security teams.
● Advanced certifications such as CISSP, CISM, GIAC (GCTI, GPEN, GXPN, GREM), OSCP, OSCE, or equivalent.
● Experience with threat intelligence platforms (TIPs) such as MISP, ThreatConnect, or Anomali.
● Familiarity with AI/ML frameworks, model development, and AI security testing tools.
● Experience with bug bounty programs or coordinated vulnerability disclosure processes.
● Knowledge of security orchestration, automation, and response (SOAR) platforms.
● Experience in highly regulated industries (healthcare, finance, retail).
● Published security research, conference presentations, or contributions to open-source security projects.
● Understanding of supply chain security, software composition analysis, and third-party risk management.
Individual Competencies:
Self-Awareness: Recognizes and leverages personal strengths and addresses development areas to maximize effectiveness and growth.
● Teamwork: Builds relationships and works collaboratively with peers, cross-functional teams, and external partners to achieve common goals.
● Adaptable: Embraces change and complexity; quickly adjusts strategies and approaches in response to evolving threats and organizational needs.
● Innovative: Champions creative problem-solving and new approaches to security challenges; encourages experimentation and calculated risk-taking within the team.
● Curious: Maintains continuous learning mindset; actively seeks new knowledge about emerging threats, attack techniques, and security technologies.
The physical demands described here are representative of those that must be met by an associate to successfully perform the major job responsibilities (essential functions) of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the major job responsibilities. This job description is not intended to be an exhaustive list of all duties, responsibilities, or qualifications associated with the job. Duties responsibilities and activities may change, or new ones may be assigned at any time with or without notice.
While performing the duties of this job, the associate is:
● Regularly required to use hands to finger, handle or feel objects, tools or controls, and reach with hands or arms.
● Regularly required to talk or hear and read instructions on a computer monitor and/or printed on paper.
● Occasionally required to stand, kneel or stoop, and lift and/or move up to 15 pounds.
● Regularly required to view items at an extremely close range and must be able to adjust and readjust focus.
● Occasionally required to remain in a stationary position.
Occasionally: Job requires this activity up to 33% of the time
Frequently: Job requires this activity between 33% - 66% of the time
Regularly: Job requires this activity more than 66% of the time
As an Inmar Associate, you:
● Put clients first and consistently display a positive attitude and behaviors that demonstrate an awareness and willingness to listen and respond to clients in order to meet their short-term and long-term needs, requirements and exceed their expectations.
● Treat clients and teammates with courtesy, consideration and tact; you also can perceive the needs of internal and external clients and communicate effectively with the objective of delighting and retaining the client.
● Build collaborative relationships and work cooperatively with others, inside and outside the organization, to accomplish objectives, develop and maintain mutually beneficial partnerships, leverage information and achieve results.
● Set and attain achievable, yet aggressive, goals with a sense of urgency and accountability.
● Understand that results are important and focus on turning mission into action to achieve results following the principles of agile, dynamic execution while consistently complying with quality, service and productivity standards to meet deadlines and exceed expectations by giving our clients the best possible outcome.
● Support a safe work environment by following safety rules and regulations and reporting all safety hazards.
At Inmar, we put people first and that means empowering our associates to thrive at every stage of life and career. Our comprehensive and competitive benefits package is thoughtfully designed to support a wide range of lifestyles and life stages.
Eligible associates have access to:
Medical, Dental, and Vision insurance
Basic and Supplemental Life Insurance options
401(k) retirement plans with company match
Health Spending Accounts (HSA/FSA)
We also offer:
Flexible time off and 11 paid holidays
Family-building benefits, including Maternity, Adoption, and Parental Leave
Tuition Reimbursement and certification support, reflecting our commitment to lifelong learning
Wellness and Mental Health counseling services
Concierge and work/life support resources
Adoption Assistance Reimbursement
Perks and discount programs
Please note that eligibility for some benefits may depend on your job classification and length of employment. Benefits are subject to change and may be governed by specific plan or program terms.
We are an Equal Opportunity Employer, including disability/vets.
Recruitment Fraud Notice: Recruitment fraud is an increasingly common scam where individuals pose as employers to offer fictitious job opportunities. Scammers sometimes impersonate Inmar recruiters on LinkedIn and other channels. We will never ask for payment or sensitive personal information during the hiring process. Verify any role on our official Workday Careers site and learn how to spot scams in our full notice.
This position is not eligible for student visa sponsorship, including F-1 OPT or CPT. Candidates must have authorization to work in the U.S. without the need for employer sponsorship now or in the future.