Level

NCC Group

Executive Principal Consultant - Red Team

NCC Group is hiring an Executive Principal Consultant - Red Team in Madrid, Spain. Level rates it ; you can apply on NCC Group.

Level's read on this job

  • Little AI ●○○○ is how Level rates this role: aI is not part of the work.
  • Tools and skills the posting cites include AWS, Azure and Google Cloud.
  • Level classifies it as a lead role.
  • Level lists 86 other open roles at NCC Group.
  • The role was posted within the past week.

AI in this role

Lead high-end adversary simulation engagements and offensive security assessments as an Executive Principal Consultant.

awsazuregcpoffice-365
red-teamingadversary-simulationpenetration-testingedr-evasion
Role Purpose
As an Executive Principal Consultant within the Red Teaming practice, you’ll take a leading role in delivering high-end adversary simulation engagements for clients with mature security postures and critical risk profiles. You'll operate across the entire attack lifecycle—from initial access and evasion of EDR, through lateral movement and objective completion—while ensuring the safety, confidentiality, and operational integrity of every engagement.

You’ll also contribute to our capability development, tooling, and methodologies, while mentoring the next generation of Red Teamers and representing NCC Group in client-facing engagements, including with C-level stakeholders.

This role is central to advancing NCC Group’s offensive security capability while helping our clients understand, detect, and respond to sophisticated threats in real-world scenarios.

Key Accountabilities

You’ll lead the design, planning, and execution of Red Team and adversary simulation engagements across critical sectors such as financial services, government, and defence. These operations will align with frameworks such as CBEST, TIBER, CORIE, and more. You’ll also build strong stakeholder relationships, lead debriefs with both technical and executive audiences, and translate complex attack paths into clear, actionable insight.

Over the next 12–24 months, you'll establish yourself as a senior authority in the Red Teaming space, contribute to tooling and methodology development, mentor rising talent, and play an active role in growing our capability in both regulated and bespoke assessments.

Skills

You are an experienced operator who combines deep technical expertise with strong client-facing and leadership skills. You’re comfortable running complex operations end-to-end and enjoy mentoring others while staying hands-on.

We’d love to see experience in:
  • Designing and delivering complex adversary simulations
  • Evading controls such as EDR/EPP and navigating defensive environments
  • Microsoft AD, Office 365, cloud platforms (AWS, Azure, GCP), MacOS
  • Stakeholder engagement, including executive-level briefings
  • Report writing that balances narrative flow and technical accuracy
Desirable:
  • Familiarity with CBEST, TIBER, CORIE, AASE, iCAST, FEER
  • Experience building tools or automation for Red Team use
  • Understanding of cybersecurity frameworks and regulatory standards
Certifications required:
  • CREST CCT-INF is desired 
  • CREST CCSAS or CREST CCSAM is highly desired.

How we rate this

Executive Principal Consultant - Red Team at NCC Group rates 0 out of 100 for how much of the daily work is AI. That makes it Little AI (AI Level 1 of 4). The level is about AI in the job, not seniority.

Classification

Little AI. AI is not part of the work.

  1. ●●●● Builds AI80 to 100
  2. ●●●○ Works on AI60 to 79
  3. ●●○○ Uses AI40 to 59
  4. ●○○○ Little AI0 to 39

Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.

Prepare for this job

Built from this posting and from similar jobs on Level.

Skills and AI tools this role asks for

Red TeamingAdversary SimulationPenetration TestingEdr EvasionAWSAzureGoogle CloudOffice 365

Questions you could be asked

  1. Tell me about a project where red teaming was part of your work. What did you do?
  2. Tell me about a project where adversary simulation was part of your work. What did you do?
  3. Tell me about a project where penetration testing was part of your work. What did you do?
  4. Tell me about a project where edr evasion was part of your work. What did you do?
  5. Walk me through how you've used AWS in your day-to-day work.

Adapt your resume

  • List these exact terms on your resume: Red Teaming, Adversary Simulation, Penetration Testing, Edr Evasion, and AWS. An applicant tracking system matches the wording, not the idea.
  • Attach one line of real, concrete experience to at least one of them. A tool named with nothing behind it rarely survives a human read.

Want an expert to read your CV for this job?

Free. Send your CV and the role you want next. We reply by email within 2 to 4 business days.

Get new AI jobs by email

One email a week with the new AI jobs, each rated for how much AI is in the work. No recruiter spam, unsubscribe in one click.

Free. One email a week. Unsubscribe in one click.

Similar roles

Other roles that involve little AI, at other companies.

What kind of AI work fits you?

Answer 12 practical questions in about three minutes. Get a simple profile, the work it points to, and live roles to explore next.

Find my next step

More jobs at NCC Group

Related searches

Same AI level

Jobs by city