Red Team Consultants – Managing, Principal & Executive Principal

Overview

In this role you lead advanced adversary simulation engagements across the full attack lifecycle, ensuring safe and confidential operations. You work with cross-functional teams and C-level clients to deliver meaningful risk insights, while shaping tooling, methodologies, and capability development within the Red Team practice. You mentor junior consultants and represent NCC Group in client-facing discussions. The position blends hands-on delivery with strategic leadership and pre-sales support to drive mature security outcomes.

Pay / Benefits

• Flexible Working
• 25 days holiday + bank holidays
• Medicash & Critical Illness Scheme
• Pension, Life Assurance, and Share Save Scheme
• Community & Volunteering Programmes
• Green Car Scheme and Cycle Scheme

Responsibilities

• Design, plan and execute advanced adversary simulations and Red Team engagements aligned with industry standards and regulatory frameworks
• Maintain operational security and risk mitigation throughout delivery
• Clearly communicate risks and safety concerns to clients
• Utilize off-the-shelf and custom-built tools to achieve objectives and evade detection
• Create and maintain custom scripts or tools to automate Red Team activities
• Produce narrative, high-quality reports for technical and non-technical audiences
• Deliver debriefs and presentations to security teams and executive stakeholders
• Collaborate autonomously on smaller engagements and work with teams on larger, multi-phase assessments
• Build strong client and internal relationships and support technical pre-sales when required
• Share knowledge to develop internal Red Team capabilities and stay updated on TTPs and detection technologies
• Mentor junior consultants and promote a culture of learning, safety, and excellence

Key requirements

• End-to-end experience delivering high-complexity Red Team engagements
• Deep understanding of adversary lifecycle and TTPs
• Familiarity with evasion techniques and bypassing EDR/EPP and other controls
• Experience engaging with stakeholders and briefing executives
• Excellent written English and ability to produce structured reports
• Proficiency in Microsoft Active Directory, Office 365 security, cloud security (AWS, Azure, GCP), and MacOS/mixed environments
• Stakeholder engagement
• Mentorship and leadership
• Clear written and verbal communication
• Microsoft Active Directory
• Office 365 security mechanisms
• Cloud security (AWS, Azure, GCP)