Lead Consultant (Red Teaming Experience, OSCP, CREST CRT Cert Required)

A Lead Consultant provides expert IT security consultancy and advisory services, helping to secure cyber assets, including networks, mobile applications, web applications, and IoT devices. The role involves red teaming, security system configuration, source code review, and penetration testing.
Duties & Responsibilities
Perform red teaming exercises to simulate real-world adversarial attacks, testing organisational defences, incident response capabilities, and security awareness across people, process, and technology.
Conduct technical security assessments, including penetration testing, source code review, and security configuration analysis.
Red Teaming & Adversary Simulation
Design and execute sophisticated red team operations that simulate advanced persistent threats (APTs) and real-world attack scenarios
Conduct multi-layered security assessments across network, application, cloud, and physical security domains
Emulate threat actor tactics, techniques, and procedures (TTPs) aligned with frameworks such as MITRE ATT&CK
Test detection and response capabilities of security operations centres (SOCs) and incident response teams
Penetration Testing
Perform comprehensive penetration testing across web applications, mobile applications, APIs, network infrastructure, and cloud environments
Conduct vulnerability assessments using both automated tools and manual testing techniques
Execute ethical hacking methodologies following industry standards including PTES (Penetration Testing Execution Standard), OWASP, and OSSTMM
Identify security weaknesses in system configurations, code implementations, and security control
Continuous Improvement
Stay current with emerging threats, attack vectors, and security trends
Develop custom tools, scripts, and exploits to enhance testing capabilities
Mentor junior team members and share knowledge across Team NCS
Relevant certifications such as OSCP, OSEP, OSWE, CRTO, CRTP or equivalent red teaming credentials is required.
Relevant experience with cloud security, red team operations, threat intelligence or purple team exercises is an advantage.

Employment type
Full-time

Work arrangement
No