Principal Security Consultant - Red Team

NCC Group; Madrid; Vor Ort; EUR 140.000 - 195.000; Vollzeit

Benefits dieser Stelle

Flexible working

Pension

Life Assurance

Share Save Scheme

Maternity & Paternity leave

Employee Referral Program

Lifestyle & Wellness

Learning & Development

Zusammenfassung

NCC Group in Madrid is seeking an Executive Principal Consultant within the Red Teaming practice to lead adversary simulations across client environments, from initial access to objective completion, ensuring safety and integrity of engagements.

You'll mentor rising talent, contribute to tooling and methodologies, and represent NCC Group in client-facing engagements including with C-level stakeholders across financial services, government, and defence sectors.

Qualifikationen

• Experience delivering complex adversary simulations.
• Ability to evade controls such as EDR/EPP.
• Proficiency with Microsoft AD, Office 365 and cloud platforms.
• Strong stakeholder engagement and executive-level briefings.
• Report writing balancing narrative and technical accuracy.

Aufgaben

• Lead the design, planning, and execution of Red Team engagements across critical sectors.
• Build strong stakeholder relationships and debrief both technical and executive audiences.
• Mentor rising talent and contribute to tooling/methodology development.
• Grow capability in regulated and bespoke assessments.

Kenntnisse

Adversary simulations

Client-facing leadership

End-to-end operations

Executive-level briefings

Mentoring

Ausbildung

CREST CCT-INF

CREST CCSAS

CREST CCSAM

Tools

Microsoft AD

Office 365

AWS

Azure

GCP

MacOS

Jobbeschreibung

Principal Security Consultant - Red Team

Department: Cyber Services and Capabilities

Employment Type: Full Time

Location: ESP Madrid

Description

As an Executive Principal Consultant within the Red Teaming practice, you’ll take a leading role in delivering high-end adversary simulation engagements for clients with mature security postures and critical risk profiles. You'll operate across the entire attack lifecycle—from initial access and evasion of EDR, through lateral movement and objective completion—while ensuring the safety, confidentiality, and operational integrity of every engagement.

You’ll also contribute to our capability development, tooling, and methodologies, while mentoring the next generation of Red Teamers and representing NCC Group in client-facing engagements, including with C-level stakeholders.

This role is central to advancing NCC Group’s offensive security capability while helping our clients understand, detect, and respond to sophisticated threats in real-world scenarios.

Key Accountabilities

You’ll lead the design, planning, and execution of Red Team and adversary simulation engagements across critical sectors such as financial services, government, and defence. These operations will align with frameworks such as CBEST, TIBER, CORIE, and more.

You’ll also build strong stakeholder relationships, lead debriefs with both technical and executive audiences, and translate complex attack paths into clear, actionable insight.

Over the next 12-24 months, you'll establish yourself as a senior authority in the Red Teaming space, contribute to tooling and methodology development, mentor rising talent, and play an active role in growing our capability in both regulated and bespoke assessments.

Skills

You are an experienced operator who combines deep technical expertise with strong client-facing and leadership skills. You’re comfortable running complex operations end-to-end and enjoy mentoring others while staying hands-on.

We’d love to see experience in:

• Designing and delivering complex adversary simulations
• Evading controls such as EDR/EPP and navigating defensive environments
• Microsoft AD, Office 365, cloud platforms (AWS, Azure, GCP), MacOS
• Stakeholder engagement, including executive-level briefings
• Report writing that balances narrative flow and technical accuracy

Desirable:

• Familiarity with CBEST, TIBER, CORIE, AASE, iCAST, FEER
• Experience building tools or automation for Red Team use
• Understanding of cybersecurity frameworks and regulatory standards

Certifications required:

• CREST CCT-INF is desired
• CREST CCSAS or CREST CCSAM is highly desired

What do we Offer in Return?

We have a high-performance culture which is balanced evenly with world-class well-being initiatives and benefits:

• Flexible working
• Financial & Investment
• Pension
• Life Assurance
• Share Save Scheme
• Maternity & Paternity leave
• Employee Referral Program
• Lifestyle & Wellness
• Learning & Development