> Markdown version of [/jobs/ext/3293193-cyber-capability-lead](https://www.wearedevelopers.com/jobs/ext/3293193-cyber-capability-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cyber Capability Lead - **Company:** Whitetree - **Location:** Bristol, UK (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Software System Penetration Testing, Red Team (Cyber Security), SC Clearance - **Published:** September 1, 2026 - **Apply:** https://uk.indeed.com/viewjob?jk=585e6b2464e835e5 ## About the Role * Senior offensive cyber leadership in defence, national security, critical infrastructure, or high-assurance environments * Recognised offensive cyber certifications such as CREST CRT/CCT, CREST Certified Red Team Specialist or Manager, CHECK Team Leader/Member aligned credentials, OSCP, OSEP, CRTO, or equivalent demonstrable experience * Experience building a cyber practice or capability * Strong background in threat-led penetration testing, red and purple teaming, breach and attack simulation, attack surface mapping, adversary emulation, and offensive security assurance * Able to recruit and lead cleared cyber specialists * Ideally located within commutable distance of Bristol * Current right to live and work in the UK * Current SC clearance or willing and eligible to undergo a Security Clearance check * Willingness and ability to work from home and travel for client engagements, including overnight stays away from home around the UK when required ## Description We're excited to offer an opportunity for a Cyber Capability Lead to shape and grow our offensive cyber practice, with an initial focus on threat-led penetration testing, red and purple teaming, breach and attack simulation, attack surface mapping, and the accredited capability needed to build market credibility. Since our establishment in 2018, Whitetree has been on a mission to empower clients, make lasting impacts, and provide unmatched career growth opportunities. We're passionate innovators driven by our values of Trust, Integrity, Innovation, and Excellence. To support effective collaboration and client delivery, you will ideally live within commutable distance of Bristol. Your responsibilities will include: * Define and maintain the competency model for offensive cyber delivery, including methods, standards, quality gates, tooling, templates, and reusable delivery accelerators * Assure technical quality across engagements and ensure consistent, high-quality delivery * Grow depth and bench strength in the cyber practice by coaching consultants, shaping career paths, funding certification/accreditation, and building succession for key technical roles * Develop and maintain the roadmap for required client-facing accreditations, increase certified practitioner numbers, and build strong working relationships with NCSC, MoD, and prime contractors * Publish insight, represent the organisation at industry events, and strengthen external credibility and reputation * Own and evolve the offensive cyber service catalogue, prioritising threat-led penetration testing, red team operations, purple teaming, breach and attack simulation, attack surface mapping, adversary emulation, and reusable assessment accelerators in line with market demand and delivery capacity * Provide senior technical input to bids, shape credible solutions and win themes, support pricing and effort estimation, and demonstrate delivery confidence to customers In your first 3-6 months, success might look like: * Accredited capability roadmap agreed, with priority accreditations, owners, evidence requirements, and milestones defined * Plan agreed for cleared offensive cyber capability, with priority roles identified and recruitment, associate, or partner routes in progress * Cyber-led bid pipeline shaped, with qualified opportunities, reusable bid content, and clear win themes in place * Capability status progressed against agreed maturity criteria, with visible movement from the current baseline towards the target state