Security Testing Practise Lead

The successful Head of Security Testing will play a pivotal role in shaping the future direction of the practice, leading both established offensive security services and the continued development of AI security testing capabilities., * Lead and develop the security testing practice, ensuring exceptional standards across all client engagements.

• Manage, mentor, and develop a team of Security Consultants and Penetration Testers.
• Perform hands-on security testing across web applications, APIs, cloud environments, infrastructure, mobile applications, and wireless networks.
• Oversee project delivery, resource allocation, utilisation, and quality assurance processes.
• Support client scoping, proposal development, project planning, and technical pre-sales activities.
• Develop and enhance testing methodologies, reporting standards, tooling, and operational procedures.
• Identify opportunities to introduce new services in response to market demand and emerging threats.
• Build and maintain strong client relationships, acting as a trusted technical advisor.
• Contribute to thought leadership initiatives, industry events, and technical content creation.
• Drive the development of AI and LLM security testing capabilities within the practice.

• Minimum 5 years’ hands-on security testing or penetration testing experience.
• Previous experience leading, managing, or developing a security testing team or practice.
• Strong expertise across web application, infrastructure, cloud, API, mobile, and wireless security testing.
• Deep knowledge of OWASP Testing Guide, PTES, OSSTMM, and recognised penetration testing methodologies.
• Experience using tools such as Burp Suite, Nmap, Nessus, Qualys, Metasploit, and Kali Linux.
• Strong knowledge of AWS, Azure, and Google Cloud security testing.
• Excellent report writing, presentation, and stakeholder communication skills.
• Commercial awareness with experience supporting client engagements, scoping, and proposal development.

Desirable:

• CREST CRT/CCT, OSCP, OSCE/OSWE, CISSP, CHECK Team Member, or CHECK Team Leader certifications.
• Red Teaming and Social Engineering experience.
• AI and LLM Security Testing knowledge.
• Purple Teaming or Breach Attack Simulation experience.
• Experience with Docker, Kubernetes, and CI/CD security.
• Experience launching or developing new Cyber Security service offerings.

Head of Security Testing Key Attributes:

• Strong leadership and mentoring capabilities.
• Commercially aware with excellent client-facing skills.
• Highly organised and quality-focused.
• Analytical and solution-oriented mindset.
• Passionate about Cyber Security, innovation, and continuous improvement.

This is an outstanding opportunity for an ambitious Head of Security Testing to join a growing Cyber Security consultancy and play a key role in shaping the future of its security testing services and technical capabilities.