Executive Principal Consultant - Red Team

Key Responsibilities

Skills, Knowledge and Expertise

Benefits

• Flexible Working: Balance your work and personal life with our flexible working options.
• Generous Holiday Allowance: Enjoy 25 days of holiday, plus bank holidays, with the option to buy up to 5 additional days of annual leave.
• Medicash & Critical Illness Scheme
• Financial & Investment Benefits: Enjoy peace of mind with our Pension, Life Assurance, and Share Save Scheme.
• Community & Volunteering Programmes: Make a difference in your community with our volunteering opportunities.
• Green Car Scheme: Drive green and save money with our eco-friendly car scheme.
• Cycle Scheme: Stay fit and healthy with our cycle-to-work scheme.
• Special Time Off: Take time off for those big moments in life, like getting married/entering into a civil partnership, becoming a grandparent, and welcoming home a new pet.
• Family Planning: Benefit from our generous maternity and paternity leave, as well as time off and support for those undergoing fertility treatments.

Responsibilities

• Engagement Delivery
• Design, plan, and execute advanced adversary simulation and Red Team engagements aligned with industry standards and regulatory frameworks (e.g., CBEST, TIBER, CORIE, AASE, iCAST, FEER).
• Maintain a strong focus on operational security and risk mitigation throughout delivery.
• Communicate risks and safety concerns to clients clearly and proactively before and during operations.
• Use both off-the-shelf and custom-built tools to achieve objectives and evade detection.
• Create and maintain custom scripts or tools to automate Red Team activities or exploit environment-specific weaknesses.
• Reporting and Communication
• Produce high-quality, narrative-driven reports that convey technical detail, context, and actionable insight to both technical and non-technical audiences.
• Deliver detailed debriefs and presentations to security teams and C-level stakeholders.
• Translate complex attack chains into engaging, informative documentation.
• Collaboration and Stakeholder Management
• Work autonomously on smaller engagements and collaboratively on large-scale, multi-phase assessments.
• Build strong, lasting relationships with clients and internal teams.
• Support sales and scoping activity where required, contributing to technical pre-sales conversations.
• Capability Development
• Share knowledge and develop internal Red Team capabilities through collaboration, tooling contributions, and process improvements.
• Keep abreast of emerging TTPs, threat actors, and detection technologies, evaluating and integrating relevant techniques.
• Mentorship and Thought Leadership
• Act as a mentor and knowledge resource for junior consultants and cross-functional teams.
• Promote a culture of learning, safety, and excellence within the Red Team practice.
• Engagement Delivery - Design, plan, and execute advanced adversary simulation and Red Team engagements aligned with industry standards and regulatory frameworks (e.g., CBEST, TIBER, CORIE, AASE, iCAST, FEER). - Maintain a strong focus on operational security and risk mitigation throughout delivery. - Communicate risks and safety concerns to clients clearly and proactively before and during operations. - Use both off-the-shelf and custom-built tools to achieve objectives and evade detection. - Create and maintain custom scripts or tools to automate Red Team activities or exploit environment-specific weaknesses. Reporting and Communication - Produce high-quality, narrative-driven reports that convey technical detail, context, and actionable insight to both technical and non-technical audiences. - Deliver detailed debriefs and presentations to security teams and C-level stakeholders. - Translate complex attack chains into engaging, informative documentation. - Collaboration and Stakeholder Management - Work autonomously on smaller engagements and collaboratively on large-scale, multi-phase assessments. - Build strong, lasting relationships with clients and internal teams. - Support sales and scoping activity where required, contributing to technical pre-sales conversations. Capability Development - Share knowledge and develop internal Red Team capabilities through collaboration, tooling contributions, and process improvements. - Keep abreast of emerging TTPs, threat actors, and detection technologies, evaluating and integrating relevant techniques. Mentorship and Thought Leadership - Act as a mentor and knowledge resource for junior consultants and cross-functional teams. - Promote a culture of learning, safety, and excellence within the Red Team practice.

Skills

• Essential:
• Demonstrable experience delivering high-complexity Red Team engagements end-to-end.
• Deep understanding of the adversary lifecycle and common tactics, techniques, and procedures (TTPs).
• Familiarity with evasion techniques and bypassing controls such as EDR/EPP, email/web gateways, proxies, etc.
• Experience in stakeholder engagement, with the ability to brief both security professionals and executive stakeholders.
• Excellent written English and ability to create structured, compelling reporting documents.
• Proficiency across multiple relevant technical domains:
• Microsoft Active Directory
• Office 365 security mechanisms
• Cloud security (AWS, Azure, GCP)
• MacOS and mixed environments
• Desirable:
• Experience working under regulatory testing frameworks such as:
• CBEST, TIBER-EU, CORIE, AASE, iCAST, or FEER
• Experience in the design or development of Red Team tooling or automation.
• Familiarity with UK and international cybersecurity frameworks, regulations, and best practices.
• Preferred Qualifications:
• CREST CCT-INF (Infrastructure)
• CREST CCSAS (Simulated Attack Specialist)
• CREST CCSAM (Simulated Attack Manager)