Cyber Security Consultant (Red Team Delivery)

Deliver threat-led security assessments, adversary emulation and red team activities within complex defence and government environments. You will work as part of the Leonardo’s delivery teams to ensure the effectiveness of people, processes and technology against realistic cyber threats, producing clear findings and recommendations that improve customer resilience. Operational Infrastructure and Tooling Support the design, provisioning and maintenance of infrastructure used during red team and adversary simulation activities. This includes the deployment and management of security tooling, cloud-based environments and supporting platforms required to conduct operations safely and effectively. Documentation and Knowledge Sharing Produce high-quality technical documentation, reports and operational procedures. Share knowledge across the wider team through mentoring, collaboration and technical discussions to help strengthen Leonardos offensive security capability. Customer and Stakeholder Engagement Work closely with customers, project teams and security stakeholders to scope activities, communicate findings and support the successful delivery of engagements. You will contribute technical expertise throughout the engagement lifecycle, from planning through to final reporting and replay activities.

• Experience delivering red team, adversary simulation or advanced penetration testing activities.
• Relevant certifications relating to red teaming.
• Strong technical skills in one or more of the following access, cloud exploitation, malware development, detection evasion, operational security, physical security testing or adversary emulation.
• Experience using scripting or development languages such as Python, C#, JavaScript, Go, Rust or similar.
• Ability to contribute technical leadership and provide direction during engagements.
• Strong analytical, communication and reporting skills.
• Willingness to travel to customer sites, generally Bristol and SW.
• Is comfortable with suitable coding languages for OST / Malware development (C, C#, Python, JS, Go, Rust, Ada, Java).?

Desirable

• Experience working within Defence, MOD or other high-assurance environments.
• Understanding of frameworks such as MITRE ATT&CK, CAF or NIST.
• Experience designing or maintaining infrastructure used to support offensive security operations.
• Experience developing tools, automation or bespoke offensive security capabilities.
• Relevant industry certifications such as, RTO RTO2, OSCP, OSEP, OSED, OSCE, CREST CRT/CCT, or equivalent.