Senior Red Team Lead: Penetration & Adversary Emulation

Rootshell Security; United Kingdom; Hybrid; GBP 70,000 - 90,000; Full time

Benefits offered by this job

Long-term career progression opportunities

Continuous technical and non-technical training

Attendance at industry conferences

Mentoring and career development from senior leadership

Job summary

Rootshell Security is looking for an experienced Senior/Principal Penetration Tester to join their Offensive Security team in the UK. This role involves delivering advanced Red Team operations and intelligence-led security assessments to help clients gauge their resilience against threats.

Responsibilities include leading complex engagements and conducting attack simulations aligned to established frameworks. Candidates must hold a recognized Red Team certification and have significant Red Team experience.

The position also allows for some remote working alongside on-site client activities.

Qualifications

• Must be permanently based within the United Kingdom.
• Experience operating against Azure, AWS and hybrid enterprise environments.
• Strong knowledge of adversary emulation and operational security.

Responsibilities

• Lead and deliver advanced penetration testing and Red Team engagements.
• Conduct intelligence-led adversary emulation and attack simulation exercises.
• Produce high-quality technical reports and executive-level findings.

Skills

Eligibility for UK Security Clearance

Commercial experience in Red Team engagements

Knowledge of MITRE ATT&CK Framework

Experience with TIBER-EU, CBEST, DORA

Client communication skills

Network security experience

Proficiency in Python, PowerShell or C#

Education

Recognized Red Team certification (CREST, CyberScheme)

Team Leader certifications in Infrastructure/Applications

Job description

Rootshell Security is looking for an experienced Senior/Principal Penetration Tester to join their Offensive Security team in the UK. This role involves delivering advanced Red Team operations and intelligence-led security assessments to help clients gauge their resilience against threats.

Responsibilities include leading complex engagements and conducting attack simulations aligned to established frameworks. Candidates must hold a recognized Red Team certification and have significant Red Team experience.

The position also allows for some remote working alongside on-site client activities.