Offensive Security Team Lead

About the role

One of our client, a focused cybersecurity service provider with over 15 years of experience, is seeking an Offensive Security Team Lead to head their penetration testing and red‑team operations.

Key responsibilities

• Lead and mentor a team of penetration testers and red‑team operators, setting technical direction and quality standards.
• Plan and execute advanced penetration tests, red‑team engagements, and adversary emulation exercises across networks, web/mobile applications, cloud environments, and physical/social engineering vectors.
• Conduct manual exploitation, source code review, and develop custom exploits or tooling for identified vulnerabilities.
• Design and run purple‑team exercises in partnership with the Blue Team/SOC to validate detection and response capabilities.
• Own the offensive security roadmap, including tooling, methodology (e.g., MITRE ATT&CK‑aligned), and scope of engagements.
• Deliver clear, actionable technical reports and executive summaries to stakeholders and leadership.
• Track emerging threats, TTPs, and 0‑day/N‑day research relevant to the organization’s attack surface.
• Collaborate with engineering teams on secure development practices and remediation validation.
• Manage vendor relationships for third‑party pentests and red‑team tooling.
• Enforce rules of engagement, safety protocols, and legal/compliance requirements for offensive testing.

Required profile

• 7+ years in offensive security, penetration testing, or red teaming, with at least 2 years in a leadership or team‑lead capacity.
• Deep expertise in exploitation techniques, web application security, network penetration testing, and post‑exploitation/lateral movement.
• Proficiency in scripting and exploit development (Python, C/C++, PowerShell, or similar).
• Strong understanding of Windows/Linux internals, Active Directory attack paths, and cloud security (AWS, Azure, GCP).
• Excellent written and verbal communication skills for technical and executive audiences.
• Experience building or scaling an offensive security function.

Required skills

• Exploitation techniques
• Post‑exploitation lateral movement
• Active Directory attack paths
• Exploit development
• Red teaming
• Network penetration testing
• C programming
• Cloud security
• PowerShell
• GCP
• Linux Internals
• Azure
• Penetration testing
• Web application security
• Python
• Scripting
• AWS