Penetration Testing Lead

Job description

Penetration Testing Practice Lead

London, UK (Hybrid) - Once a week minimum

£85,000 - £100,000

Are you ready to lead the next phase of offensive security growth?

We’re hiring a hands-on Penetration Testing Lead to shape, scale, and elevate a growing cyber security practice following major investment and expansion

• Own and grow the offensive security function across penetration testing, red team, blue team, and purple team services.
• Lead, mentor, and develop a team of skilled security consultants.
• Stay hands-on with complex technical assessments and high-value client engagements.
• Set testing methodologies, reporting standards, QA processes, and technical best practice.
• Work closely with senior leadership and commercial teams on scoping, proposals, and client presentations.

Responsibilities

• Deliver and oversee penetration testing across web apps, APIs, cloud, infrastructure, wireless, and mobile environments.
• Support advanced red team, blue team, purple team, and threat emulation exercises.
• Review technical reports and ensure findings land clearly with technical and executive stakeholders.
• Drive service improvement across tooling, frameworks, methodologies, and delivery quality.
• Balance team leadership, client engagement, and hands-on technical delivery.
• Advanced red team operations, adversary simulation, or breach and attack simulation.
• Cloud security testing across AWS, Azure, or Google Cloud Platform.
• Container, Kubernetes, Docker, CI/CD, social engineering, AI security, or C2 framework experience.
• Contributions to the security community through blogs, talks, research, or events.

Skills

• Strong hands-on penetration testing experience across multiple security domains.
• Proven experience leading technical teams and delivering offensive security engagements.
• Deep knowledge of OWASP, PTES, OSSTMM, exploitation methods, and modern attack techniques.
• Confidence with tools such as Burp Suite, Nmap, Metasploit, Nessus, Qualys, and Kali Linux.
• Excellent communication skills, commercial awareness, and strong client-facing experience.
• CREST CRT/CCT, OSCP, OSCE, OSWE, CISSP, CHECK Team Member, or CHECK Team Leader would be highly desirable.