Lead Pentester

Job Description:

Your Impact

Leonardo is seeking an experienced CHECK Team Leader (CTL) to join our growing Offensive Security capability.

Working within a defence-focused environment, you will lead and deliver penetration testing activities across enterprise IT, cloud, applications, and operational technology environments, supporting customers operating within complex and high-assurance systems.

As one of Leonardo's senior penetration testing specialists, you will be responsible for planning, scoping, delivering, quality assuring, and reporting on penetration testing engagements in accordance with NCSC CHECK standards and industry best practice. You will work directly with customers to identify and validate security risks, provide practical remediation advice, and help strengthen the resilience of critical systems that support UK national security.

This role offers the opportunity to be more than a delivery consultant. Alongside technical engagements, you will contribute to the development of Leonardo's offensive security capability, supporting service development, mentoring junior consultants, improving testing methodologies, and helping shape future service offerings.

You will work closely with cyber security specialists across Leonardo, combining hands-on technical delivery with stakeholder engagement, capability development and continuous improvement activities. We are looking for someone who enjoys solving complex technical challenges, maintaining high professional standards and helping develop the next generation of penetration testing talent.

What You'll Do as a CHECK Team Leader:

• Deliver Penetration Testing Engagements

Lead and deliver infrastructure, web application, API, cloud, wireless and operational technology penetration testing activities across defence and government environments. Assess the effectiveness of security controls and provide actionable recommendations that improve customer security posture.

• Engagement Planning and Scoping

Work with customers and project teams to define scope, objectives, constraints and rules of engagement. Ensure testing activities are appropriately planned, authorised and delivered in line with NCSC CHECK requirements.

• Technical Leadership and Quality Assurance

Provide technical leadership during engagements and act as a subject matter expert for penetration testing activities. Review testing outputs and reports to ensure quality, accuracy and consistency.

• Reporting and Risk Communication

Produce high-quality technical and executive reports, translating complex technical findings into clear business risks and practical remediation advice suitable for both technical and non-technical stakeholders.

• Capability Development

Support the ongoing development of Leonardo's offensive security services, contributing to methodologies, tooling, testing standards and service offerings.

• Mentoring and Knowledge Sharing

Support the development of junior consultants and CHECK Team Members (CTMs) through coaching, peer review, technical guidance and knowledge sharing activities.

• Research and Innovation

Maintain awareness of emerging threats, attack techniques, vulnerabilities and testing approaches. Apply new knowledge and techniques to improve customer outcomes and service delivery.

• Customer and Stakeholder Engagement

Build trusted relationships with customers, project teams and security stakeholders throughout the engagement lifecycle, from initial planning through to final reporting and remediation discussions.

• Core Consulting Skills

Building client relationships; adaptability to changing schedules; reliability and quality of delivery; flexibility in working arrangements; collaboration and teamwork.

What You'll Get:

• Professional Development. Access to industry-recognised training, conferences and certification support, including advanced CREST, OffSec and specialist technical development pathways.
• Technical Growth.  Opportunities to work across diverse penetration testing assignments spanning Defence, Government, Critical National Infrastructure and emerging technologies.
• Capability Development. Contribute to the growth of Leonardo's Offensive Security capability, influencing future service offerings, methodologies and technical standards.
• Research and Innovation Time. Dedicated opportunities to explore emerging attack techniques, tooling, cloud security, automation and offensive security research.

What You'll Bring:

We are looking for a motivated and self-driven security professional with a passion for offensive security and a strong commitment to technical excellence. This role would suit an experienced pentester looking to lead engagements and support the growth of a mature offensive security function.

Core Areas (Must Have):

• Current CREST CHECK Team Leader (CTL) qualification.
• Experience delivering penetration testing engagements across one or more of:
  • Infrastructure
  • Web Applications
  • APIs
  • Cloud Platforms
  • Wireless Networks
  • Operational Technology
• Excellent technical report writing skills for both technical and executive audiences.
• Strong stakeholder engagement and client-facing consulting skills.
• Experience planning, leading and assuring penetration testing engagements.
• Good understanding of common security frameworks and standards.
• Ability to identify and communicate security risks and remediation actions effectively.
• Experience using scripting or automation languages such as Python, PowerShell, Bash or similar.
• Strong analytical and problem-solving capability.
• Willingness to travel to customer locations when required.
• Ability to attain SC clearance and potentially higher levels of National Security Vetting.

Desirable:

• Existing SC or DV clearance.
• Experience operating within Defence, MOD or National Security environments.
• CREST CCT qualifications.
• CCT, OSCP, OSEP, OSWE, CRTO or equivalent certifications.
• Experience with cloud security testing (AWS, Azure, GCP).
• Experience with OT/ICS security testing.
• Experience developing tools, automation or testing frameworks.
• Experience mentoring junior penetration testers and conducting quality assurance reviews.
• Knowledge of NCSC CAF, NIST, ISO 27001 and MITRE ATT&CK.

This is not an exhaustive list, and we are keen to hear from you even if you might not have experience in all the above. The most important skill is a good attitude and willingness to learn.

Security Clearance

This role is subject to pre-employment screening in line with the UK Government’s Baseline Personnel Security Standard (BPSS). An additional range of Personnel Security Controls referred to as National Security Vetting (NSV) may apply, this could include meeting the eligibility requirements for The Security Check (SC) or Developed Vetting (DV). For more information and guidance please visit: https://careers.uk.leonardo.com/gb/en/security-and-vetting

Why join us

At Leonardo, our people are at the heart of everything we do. We offer a comprehensive, company-funded benefits package that supports your wellbeing, career development, and work–life balance. Whether you're looking to grow professionally, care for your health, or plan for the future, we’re here to help you thrive.

• Time to Recharge: Enjoy generous leave with the opportunity to accrue up to 12 additional flexi-days each year.
• Secure your Future: Benefit from our award-winning pension scheme with up to 15% employer contribution.
• Your Wellbeing Matters: Free access to mental health support, financial advice, and employee-led networks championing inclusion and diversity (Enable, Pride, Equalise, Armed Forces, Carers, Wellbeing and Ethnicity).
• Rewarding Performance: All employees at management level and below are eligible for our bonus scheme.
• Never Stop Learning: Free access to 4,000+ online courses via Coursera and LinkedIn Learning.
• Refer a friend: Receive a financial reward through our referral programme.
• Tailored Perks: Spend up to £500 annually on flexible benefits including private healthcare, dental, family cover, tech & lifestyle discounts, gym memberships and more.
• Flexible working: Flexible hours with hybrid working options. For part time opportunities, please talk to us about what might be possible for this role.

For a full list of our company benefits please visit our website.

Leonardo UK operates a grade-based salary framework with broad bands. The salary range shown reflects the approved grade band for this role, or a narrower hiring range published within that band, and is benchmarked against the external market. Exceptions above the standard range are managed through governance controls to protect internal equity.

Leonardo is a global leader in Aerospace, Defence, and Security. Headquartered in Italy, we employ over 53,000 people worldwide including 8,500 across 9 sites in the UK. Our employees are not just part of a team—they are key contributors to shaping innovation, advancing technology, and enhancing global safety.

At Leonardo we are committed to building an inclusive, accessible, and welcoming workplace. We believe that a diverse workforce sparks creativity, drives innovation, and leads to better outcomes for our people and our customers. If you have any accessibility requirements to support you during the recruitment process, just let us know.

Be part of something bigger - apply now!

#LI-RK1

Primary Location:

GB - Bristol - Coldharbour Lane

Contract Type:

Permanent

Hybrid Working:

Hybrid