Senior Cyber Security Consultant (Red Team Delivery)

Morson Group; West of England; On-site; GBP 60,000 - 90,000; Full time

Job summary

Leonardo is seeking an experienced offensive security professional to deliver threat-led assessments and red team exercises within defence and government environments. You will join delivery teams to produce findings and practical recommendations that improve customer resilience.

You will design and maintain testing infrastructure, deploy security tooling, and author high-quality reports. Travel to customer sites in Bristol and the SW is expected, and you will mentor colleagues while developing

Qualifications

• Experience delivering red team, adversary simulation or advanced penetration testing activities.
• Relevant certifications relating to red teaming.
• Strong technical skills in access, cloud exploitation, malware development, detection evasion, or related areas.
• Experience using scripting or development languages such as Python, C#, JavaScript, Go, Rust or similar.
• Ability to provide technical leadership and direction during engagements.
• Strong analytical, communication and reporting skills.

Responsibilities

• Deliver threat-led security assessments and red team activities within defence/government environments.
• Support design, provisioning and maintenance of testing infrastructure and security tooling.
• Produce high-quality technical reports and operational procedures for customers.
• Engage with customers and stakeholders to scope activities and communicate findings.

Skills

Red team

Adversary emulation

Scripting languages

Technical leadership

Communication

Penetration testing

Job description

JOB SUMMARY

Deliver threat-led security assessments, adversary emulation and red team activities within complex defence and government environments. You will work as part of the Leonardo's delivery teams to ensure the effectiveness of people, processes and technology against realistic cyber threats, producing clear findings and recommendations that improve customer resilience.

Operational Infrastructure and Tooling

Support the design, provisioning and maintenance of infrastructure used during red team and adversary simulation activities. This includes the deployment and management of security tooling, cloud-based environments and supporting platforms required to conduct operations safely and effectively.

Documentation and Knowledge Sharing

Produce high-quality technical documentation, reports and operational procedures. Share knowledge across the wider team through mentoring, collaboration and technical discussions to help strengthen Leonardos offensive security capability.

Customer and Stakeholder Engagement

Work closely with customers, project teams and security stakeholders to scope activities, communicate findings and support the successful delivery of engagements. You will contribute technical expertise throughout the engagement lifecycle, from planning through to final reporting and replay activities.

Essential

• Experience delivering red team, adversary simulation or advanced penetration testing activities.
• Relevant certifications relating to red teaming.
• Strong technical skills in one or more of the following access, cloud exploitation, malware development, detection evasion, operational security, physical security testing or adversary emulation.
• Experience using scripting or development languages such as Python, C#, JavaScript, Go, Rust or similar.
• Ability to contribute technical leadership and provide direction during engagements.
• Strong analytical, communication and reporting skills.
• Willingness to travel to customer sites, generally Bristol and SW.
• Is comfortable with suitable coding languages for OST / Malware development (C, C#, Python, JS, Go, Rust, Ada, Java)?

Desirable

• Experience working within Defence, MOD or other high-assurance environments.
• Understanding of frameworks such as MITRE ATT&CK, CAF or NIST.
• Experience designing or maintaining infrastructure used to support offensive security operations.
• Experience developing tools, automation or bespoke offensive security capabilities.
• Relevant industry certifications such as, RTO RTO2, OSCP, OSEP, OSED, OSCE, CREST CRT/CCT, or equivalent.