> Markdown version of [/jobs/ext/2892404-head-of-offensive-ai-security-technical-excellence](https://www.wearedevelopers.com/jobs/ext/2892404-head-of-offensive-ai-security-technical-excellence). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Head of Offensive AI Security & Technical Excellence - **Company:** LRQA Group Limited 2021 - **Location:** Birmingham, UK - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Open Web Application Security, Large Language Models, SC Clearance - **Published:** September 14, 2026 - **Apply:** https://jobs.lrqa.com/talentcommunity/apply/1436604633/?locale=en_GB ## About the Role * Strong offensive security background with demonstrable AI and machine learning security work, including testing of LLM-based or agentic systems. * Understanding of model, prompt, data and supply chain attack surfaces. * Credibility to set technical standards across a multi-discipline offensive function. * Experience leading technical teams and mentoring/training more junior members of the team to a desired outcome. Desirable: * Published AI security research or tooling. * Familiarity with AI assurance frameworks and regulation. * Experience introducing AI into delivery workflows at scale. * Recognised offensive certification such as OSAI, CREST CCT, OSCE3 or equivalent. Local/Regional Requirements (in addition to those above): * UK & Ireland: eligibility for UK security clearance (SC as a minimum) where the role supports CHECK, government or CNI-facing work. Right to work in the UK. * United States and Mexico: eligibility to work in-region and to satisfy client-specific background screening and, where required, US federal or state contractual requirements. * Greece, Kuala Lumpur and wider APAC: local employment eligibility; regional language capability desirable; awareness of local data protection and testing authorisation requirements. * All regions: satisfactory background screening in line with LRQA policy and applicable scheme requirements, and the ability to travel internationally. ## Description * Personal utilisation against the 40% target (approximately 8 days per month). * Service line order intake, revenue and margin against plan. * Pipeline contribution and win rate on opportunities where the postholder acts as technical sales lead. * Delivery quality: client satisfaction, report quality, on-time delivery and no material quality escapes. * Accreditation and scheme compliance status for the service line. * People: retention, engagement, and completion of the 5x5x5 training model (5 days of allocated training time, £5k of funding and 5 certifications per consultant, per year). * Contribution to the pooled operating model: consultant cross-skilling and successful redeployment across service lines. Reporting structure: Reports to the Head of Offensive Services. Peer to the Heads of the other four offensive service lines. Leads the team/pod leads and will have consultants reporting to them within the service line and, through them, consultants drawn from a pooled capability of approximately 100 offensive security consultants. Consultants are allocated against demand rather than held permanently within a single service line., * Build and own the offensive AI security testing methodology, testing harness, covering LLM, agentic and AI-enabled systems, aligned to OWASP LLM Top 10, NIST AI RMF and emerging regulation including the EU AI Act. * Own technical standards, peer review, quality assurance and research and development across all offensive service lines, acting as the function's technical authority. * Act as a technical sales lead: shape scope with clients, support bids and proposals, and present credibly to both technical and executive buyers. * Lead, develop and retain the pod leads and consultants in the service line, setting technical direction, career pathways and certification plans under the 5x5x5 training model. * Deliver personally on client engagements to the role's utilisation target, retaining hands-on technical credibility with clients and the team. * Drive AI-enabled delivery: adopt and govern AI tooling that increases coverage, reduces manual effort and improves output quality, without compromising client confidentiality or testing safety. * Work with peer Heads to keep consultants fungible across service lines, supporting the pooled resourcing model, cross-skilling and a leveraged delivery mix. Key health & safety responsibilities: * Eliminate or minimise employee exposure to risks by regularly reviewing the health and safety risk register, applying appropriate controls, communicating results of risk assessments, and ensuring health and safety is considered in the planning and execution of all LRQA activities. * Manage your own, and your team's, compliance with health and safety rules, instructions, systems and legal requirements to ensure employees are suitably trained and adequate resources are available to work safely. * Monitor and review health and safety performance, observe safety behaviours in the workplace, taking appropriate corrective and preventative action as necessary and suggesting and implementing improvement activities. Number of direct reports: To be confirmed - pod/team leads within the service line, plus indirect leadership of consultants allocated from the pooled capability of other consultants across Offensive Services. Geographic area of impact: Global. Delivery regions currently UK&I, Greece, US, Mexico, Kuala Lumpur and APAC, with clients and engagements worldwide. Size of budget: To be confirmed - service line P&L contribution; budget scale to be confirmed with Finance. Key stakeholders: * Head of Offensive Services * Heads of the other offensive service lines * Cyber sales and bid teams * Delivery operations and resourcing * Marketing and proposition development * HR, Reward and Legal * Clients and prospects * LRQA AI assurance and certification teams * Client data science and AI engineering functions * Research and academic partners ## Related Videos - [Rethinking Recruiting: What you didn’t know about Responsible AI](https://www.wearedevelopers.com/videos/1090-rethinking-recruiting-what-you-didn-t-know-about-responsible-ai) - [Edit Your Future: Queerverse Radical AI](https://www.wearedevelopers.com/videos/909-edit-your-future-queerverse-radical-ai) - [Creating Industry ready solutions with LLM Models](https://www.wearedevelopers.com/videos/899-creating-industry-ready-solutions-with-llm-models) - [Introduction to Responsible AI: Balancing Value and Risk](https://www.wearedevelopers.com/videos/1972-introduction-to-responsible-ai-balancing-value-and-risk) - [Prompt Injection, Poisoning & More: The Dark Side of LLMs](https://www.wearedevelopers.com/videos/1563-prompt-injection-poisoning-more-the-dark-side-of-llms) - [AI is dead, long live AK](https://www.wearedevelopers.com/videos/1093-ai-is-dead-long-live-ak) ## Related Articles - [How to Become an AI Engineer](https://www.wearedevelopers.com/magazine/331-how-to-become-an-ai-engineer) - [Dev Digest 196: AI Killed DevOps, LLM Political Bias & AI Security](https://www.wearedevelopers.com/magazine/659-dev-digest-196-ai-killed-devops-llm-political-bias-ai-security) - [Trustworthy AI Starts at Deployment: 5 Checks Before You Ship](https://www.wearedevelopers.com/magazine/753-trustworthy-ai-starts-at-deployment-5-checks-before-you-ship) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production) - [Should AI be Regulated? The Arguments For and Against](https://www.wearedevelopers.com/magazine/271-should-ai-be-regulated-the-arguments-for-and-against)