Managing Security Consultant - Red Team

Role Purpose

As a Managing Consultant within the Red Teaming practice, you’ll take a leading role in delivering high-end adversary simulation engagements for clients with mature security postures and critical risk profiles. You'll operate across the entire attack lifecycle—from initial access and evasion of EDR, through lateral movement and objective completion—while ensuring the safety, confidentiality, and operational integrity of every engagement.

You’ll also contribute to our capability development, tooling, and methodologies, while mentoring the next generation of Red Teamers and representing NCC Group in client-facing engagements, including with C-level stakeholders.

This role is central to advancing NCC Group’s offensive security capability while helping our clients understand, detect, and respond to sophisticated threats in real-world scenarios.

You’ll lead the design, planning, and execution of Red Team and adversary simulation engagements across critical sectors such as financial services, government, and defence. These operations will align with frameworks such as CBEST, TIBER, CORIE, and more. You’ll also build strong stakeholder relationships, lead debriefs with both technical and executive audiences, and translate complex attack paths into clear, actionable insight.

Over the next 12–24 months, you'll establish yourself as a senior authority in the Red Teaming space, contribute to tooling and methodology development, mentor rising talent, and play an active role in growing our capability in both regulated and bespoke assessments.

You are an experienced operator who combines deep technical expertise with strong client-facing and leadership skills. You’re comfortable running complex operations end-to-end and enjoy mentoring others while staying hands-on.

We’d love to see experience in:

• Designing and delivering complex adversary simulations
• Evading controls such as EDR/EPP and navigating defensive environments
• Microsoft AD, Office 365, cloud platforms (AWS, Azure, GCP), MacOS
• Stakeholder engagement, including executive-level briefings
• Report writing that balances narrative flow and technical accuracy

Desirable:

• Familiarity with CBEST, TIBER, CORIE, AASE, iCAST, FEER
• Experience building tools or automation for Red Team use
• Understanding of cybersecurity frameworks and regulatory standards

Certifications required:

• CREST CCT-INF is desired.

Flexible Working: Balance your work and personal life with our flexible working options.

Generous Holiday Allowance: Enjoy 25 days of holiday, plus bank holidays, with the option to buy up to 5 additional days of annual leave.

Medicash & Critical Illness Scheme

Financial & Investment Benefits: Enjoy peace of mind with our Pension, Life Assurance, and Share Save Scheme.

Community & Volunteering Programmes: Make a difference in your community with our volunteering opportunities.

Green Car Scheme: Drive green and save money with our eco-friendly car scheme.

Cycle Scheme: Stay fit and healthy with our cycle-to-work scheme.

Special Time Off: Take time off for those big moments in life, like getting married/entering into a civil partnership, becoming a grandparent, and welcoming home a new pet.

Family Planning: Benefit from our generous maternity and paternity leave, as well as time off and support for those undergoing fertility treatments.