Executive Principal Consultant - Red Team

Overview

As Executive Principal Consultant in our Red Teaming practice, you lead high-end adversary simulations for clients with mature security postures. You’ll influence engagements from scoping through reporting, mentor junior team members, and represent NCC Group in client-facing meetings, including with C-level stakeholders. You contribute to capability development and tooling while safeguarding safety, confidentiality, and operational integrity. This role blends technical leadership with strategic client engagement to drive security outcomes at scale.

Pay / Benefits

• Flexible working options
• 25 days holiday + bank holidays with buy-up option
• Medicash & Critical Illness Scheme
• Pension, Life Assurance, Share Save Scheme
• Volunteering opportunities
• Green Car Scheme and Cycle Scheme

Responsibilities

• Design, plan, and execute advanced adversary simulation and Red Team engagements aligned with industry standards and regulatory frameworks (CBEST, TIBER, CORIE, AASE, iCAST, FEER).
• Maintain strong operational security and risk mitigation throughout delivery.
• Clearly communicate risks and safety concerns to clients before and during operations.
• Utilize off-the-shelf and custom-built tools to achieve objectives and evade detection.
• Create and maintain custom scripts/tools to automate Red Team activities or exploit environment weaknesses.
• Produce high-quality, narrative-driven reports conveying technical context and actionable insights to technical and non-technical audiences.
• Deliver detailed debriefs and presentations to security teams and C-level stakeholders.
• Translate complex attack chains into engaging, informative documentation.
• Work autonomously on smaller engagements and collaboratively on large-scale assessments.
• Build relationships with clients and internal teams; support technical pre-sales discussions.
• Share knowledge and develop internal Red Team capabilities through tooling and process improvements.
• Keep abreast of emerging TTPs, threat actors, and detection technologies; evaluate and integrate relevant techniques.
• Mentor junior consultants and cross-functional teams; promote a culture of learning, safety, and excellence.

Key requirements

• End-to-end delivery experience of high-complexity Red Team engagements.
• Deep understanding of adversary lifecycle and common TTPs.
• Familiarity with evasion techniques and bypassing controls (EDR/EPP, gateways, proxies).
• Experience engaging stakeholders and briefing executive audiences.
• Excellent written English and ability to produce structured reporting.
• Proficiency across multiple technical domains: Microsoft Active Directory, Office 365 security, Cloud (AWS, Azure, GCP), MacOS and mixed environments.

• Stakeholder engagement
• Clear written and verbal communication
• Mentorship and leadership
• Active Directory
• Office 365 security
• Cloud security (AWS, Azure, GCP)

Full job description from WhatJobs. Apply for this role →