Executive Principal Consultant - Red Team

Key Responsibilities

• Design, plan, and execute advanced adversary simulation and Red Team engagements aligned with industry standards and regulatory frameworks (e.g., CBEST, TIBER, CORIE, AASE, iCAST, FEER). 
• Maintain a strong focus on operational security and risk mitigation throughout delivery. 
• Communicate risks and safety concerns to clients clearly and proactively before and during operations. 
• Use both off-the-shelf and custom-built tools to achieve objectives and evade detection. 
• Create and maintain custom scripts or tools to automate Red Team activities or exploit environment-specific weaknesses. 

• Produce high-quality, narrative-driven reports that convey technical detail, context, and actionable insight to both technical and non-technical audiences. 
• Deliver detailed debriefs and presentations to security teams and C-level stakeholders. 
• Translate complex attack chains into engaging, informative documentation. 
• Collaboration and Stakeholder Management 
• Work autonomously on smaller engagements and collaboratively on large-scale, multi-phase assessments. 
• Build strong, lasting relationships with clients and internal teams. 
• Support sales and scoping activity where required, contributing to technical pre-sales conversations. 

• Share knowledge and develop internal Red Team capabilities through collaboration, tooling contributions, and process improvements. 
• Keep abreast of emerging TTPs, threat actors, and detection technologies, evaluating and integrating relevant techniques. 

• Act as a mentor and knowledge resource for junior consultants and cross-functional teams. 
• Promote a culture of learning, safety, and excellence within the Red Team practice. 

Skills, Knowledge and Expertise

• Demonstrable experience delivering high-complexity Red Team engagements end-to-end. 
• Deep understanding of the adversary lifecycle and common tactics, techniques, and procedures (TTPs). 
• Familiarity with evasion techniques and bypassing controls such as EDR/EPP, email/web gateways, proxies, etc. 
• Experience in stakeholder engagement, with the ability to brief both security professionals and executive stakeholders. 
• Excellent written English and ability to create structured, compelling reporting documents.

• Microsoft Active Directory 
• Office 365 security mechanisms 
• Cloud security (AWS, Azure, GCP) 
• MacOS and mixed environments 

• Experience working under regulatory testing frameworks such as: 
• CBEST, TIBER-EU, CORIE, AASE, iCAST, or FEER 
• Experience in the design or development of Red Team tooling or automation. 
• Familiarity with UK and international cybersecurity frameworks, regulations, and best practices. 

• CREST CCT-INF (Infrastructure) 
• CREST CCSAS (Simulated Attack Specialist) 
• CREST CCSAM (Simulated Attack Manager)