Senior Offensive Security Consultant

Salary: £60,000 - 60,000 per year

Requirements:

• We are looking for a motivated, self-managed individual who can help design and adapt a constantly evolving service.
• You should demonstrate above-average analytical skills and liaise professionally with peers and customers, even under pressure.
• You must be comfortable using suitable coding languages for OST or malware development, such as C, C#, Python, JS, Go, or Rust.
• You should have strong technical skills in areas such as initial access, physical intrusion, EDR bypass, cloud exploitation, and malware development.
• You must have demonstrable experience delivering red team engagements.
• You must hold relevant regulatory certifications for red team or pentesting capability, such as CCRTS, CCRTM, CTL, or CTM.
• Desirable: experience working on projects within the MOD.
• Desirable: a deep understanding of MITRE and CAF frameworks and how they are used in reporting.
• Desirable: relevant red teaming or pentesting certifications such as OSCP, OSEP, OSED, OSCE, RTO, or RTO2.
• This role is subject to BPSS screening, NSV controls, and requires Developed Vetting clearance before starting.

Responsibilities:

• Lead, direct, and continuously improve our Red Team capability.
• Deliver and manage adversary simulation, purple team, and penetration testing engagements.
• Work as part of our Red Team Delivery Cell to deliver engagements for external customers.
• Deliver full-spectrum adversarial simulation engagements for the public sector, from initial access and physical intrusion through privilege escalation, report delivery, debrief, and post-technical replay.
• Research and develop current TTPs to maintain and improve our adversarial simulation capability.
• Maintain and improve our infrastructure design for hosting security tooling during engagements.
• Maintain comprehensive documentation of infrastructure configurations, deployment procedures, and troubleshooting guidance.
• Facilitate knowledge sharing across the team to support operational continuity and efficiency.
• Manage cloud environments such as AWS, Azure, and GCP where security tools are deployed.
• Provision and manage the infrastructure required to run security tools, ensuring high availability, scalability, reliability, and security best practices.

Technologies:

• AWS
• Azure
• C#
• Cloud
• GCP
• Support
• Python
• Rust
• Security

More:

We are Leonardo UK, a global leader in Aerospace, Defence, and Security, headquartered in Italy with over 53,000 employees worldwide and 8,500 across nine UK sites. We offer a blended hybrid working model, with home working combined with on-site collaboration at our Bristol location and customer sites, and this role requires frequent travel to Bristol and customer locations. We provide a comprehensive, company-funded benefits package including generous leave with up to 12 additional flexi-days, an award-winning pension with up to 15% employer contribution, free mental health support and financial advice, access to 4,000 online courses, and flexible benefits worth up to £500 annually. We are committed to building an inclusive, accessible, and welcoming workplace where our people help shape innovation, advance technology, and enhance global safety.

last updated 32 week of 2026