Red Team Lead

Lloyds Bank plc; Manchester; Hybrid; GBP 81,000 - 92,000; Full time

Job summary

A leading financial institution is seeking an experienced Red Team Lead in Manchester to enhance their cybersecurity posture. You will manage Red Team emulations and lead technical testing exercises while collaborating with various teams to improve security defenses. Qualifications include extensive experience in offensive security, and familiarity with penetration testing methodologies. The role offers hybrid working options and a competitive salary range between £81,999 and £91,110. Join us in shaping the future of finance while making a difference for our customers.

Benefits

Generous pension contribution of up to 15%

Annual bonus award, subject to Group performance

30 days’ holiday, with bank holidays on top

Wellbeing initiatives and generous parental leave policies

Qualifications

• Experience in network/application penetration testing and red teaming.
• Ability to conduct covert tests and identify vulnerabilities.
• Solid understanding of enterprise IT architectures.

Responsibilities

• Deliver Red Team Adversary Emulation tests and lead collaborative exercises.
• Research and devise testing scenarios.
• Support the delivery of security testing and provide technical expertise.

Skills

Offensive security operations

Communication with technical and non-technical teams

Network and operating system fundamentals

Familiarity with MITRE ATT&CK framework

Education

Offensive security/cybersecurity qualifications (e.g., SANS GIAC, OSCP)

Tools

Penetration testing methodologies

Job description

End Date: Wednesday 21 January 2026

Salary Range: £81,999 - £91,110

Flexible Working Options: Hybrid Working, Job Share

Job Title: Red Team Lead

Salary: London £81,999 - £91,110; outside London £70,929 - £78,810

Locations: London, Bristol, Edinburgh or Manchester

Hours: Full time

Working Pattern: At least two days per week (or 40% of your time) at our office locations listed above.

About this opportunity

Within the Chief Security Office (CSO) our role is to protect the Group and our customers from security threats, and to enable the Group’s businesses to make change to their services safely and quickly. The Advanced Intrusion Testing (AIT) team conducts intelligence‑led intrusion tests, including Red Teaming and Purple Teaming, designed to simulate the approach a skilled adversary would use in real‑life cyber‑attack scenarios against the Group. Scenarios are crafted to independently evaluate the organisation’s end‑to‑end cyber resilience by testing people, processes and technology. We’re currently recruiting for an experienced Red Team Lead to expand our Advanced Intrusion Testing service.

Key Responsibilities

• Deliver Red Team Adversary Emulation tests, technically leading AIT colleagues through the execution of TTPs, while handling communication with key collaborators.
• Research and devise testing that will challenge the organisations’ ability to detect and respond to cyber‑attacks.
• Lead and support the delivery of collaborative testing exercises (Purple Team tests), maximising opportunities for the SOC to improve LBG’s security defence.
• Work closely as part of a multi‑functional matrix team of technical authorities from across the Chief Security Office and the business, focused on proactively improving the security posture of the Group.
• Review testing outputs and support collaborators to identify appropriate remedial plans, while identifying thematic findings and root cause analysis.
• Act as a technical authority within Chief Security Office and share knowledge and technical expertise to others through consultation, providing advice and coaching.
• Identify and drive continuous improvement within the AIT team and support the direction of overall AIT strategy.
• Lead by example, consistently demonstrating the Group Values and the Leadership Behaviours by being approachable and acting with integrity to build trust and credibility within your team.
• Lead informal technical coaching and sharing of knowledge, providing an appropriate level of support for team members from a technical level.

What you'll need

• Solid experience in offensive security operations, such as network penetration testing, application (web / mobile / API) penetration testing, red teaming, or purple teaming.
• Ability to conduct targeted, covert tests including identifying vulnerabilities, exploiting them, and performing post‑exploitation activities, without needing to rely heavily on tools.
• Solid grasp of Red Team, Purple Team, and Penetration testing methodologies and tools.
• Good communication skills and experience of communicating technical issues with both technical and non‑technical collaborators.
• Good understanding of network and operating system fundamentals across Windows and *NIX.
• Good overall working knowledge of enterprise architectures, operations, and IT environments and Defensive Security tooling.
• Familiarity with the MITRE ATT&CK framework.

Preferred Qualifications

• Offensive security / cybersecurity related qualifications (e.g. SANS GIAC, CREST, OSCP / OSCE, CRTO or equivalent cybersecurity programme).
• Software development or coding experience in any low level or high level language (C#, C++, C, Python, Bash Scripting, Java, Rust, etc.).
• Understanding of malware techniques.
• Social Engineering and / or physical intrusion techniques.
• Experience of CI / CD, Infrastructure as Code.

About working for us

Our focus is to ensure we’re inclusive every day, building an organisation that reflects modern society and celebrates diversity in all its forms. We want our people to feel that they belong and can be their best, regardless of background, identity or culture. We were one of the first major organisations to set goals on diversity in senior roles, create a menopause health package, and a dedicated Working with Cancer initiative. And it’s why we especially welcome applications from under‑represented groups. We’re disability confident. So, if you’d like reasonable adjustments to be made to our recruitment processes, just let us know.

Benefits

• A generous pension contribution of up to 15%
• An annual bonus award, subject to Group performance
• Share schemes including free shares
• Benefits you can adapt to your lifestyle, such as discounted shopping
• 30 days’ holiday, with bank holidays on top
• A range of wellbeing initiatives and generous parental leave policies

If you’re excited by the thought of becoming part of our team, get in touch. At Lloyds Banking Group we’re driven by a clear purpose; to help Britain prosper. Across the Group, our colleagues are focused on making a difference to customers, businesses and communities. With us you’ll have a key role to play in shaping the financial services of the future, while the scale and reach of our Group means you’ll have many opportunities to learn, grow and develop. We keep your data safe. So, we’ll only ever ask you to provide confidential or sensitive information once you have formally been invited to an interview or accepted a verbal offer to join, which is when we run our background checks. We’ll always explain what we need and why, with any request coming from a trusted Lloyds Banking Group person. We’re committed to a values‑led culture and to building a workforce that reflects the diversity of the customers and communities we serve. Together we’re building a truly inclusive workplace where all of our colleagues have the opportunity to make a real difference. With 320 years under our belt, we’re used to change, and today is no different. Join us and help drive this change, shaping the future of finance while working at pace to deliver for our customers. Here, you’ll do the best work of your career. Your impact will be amplified by our scale as you learn and develop, gaining skills for the future.