Description

Role Purpose
As an Executive Principal Consultant within the Red Teaming practice, you’ll take a leading role in delivering high-end adversary simulation engagements for clients with mature security postures and critical risk profiles. You'll operate across the entire attack lifecycle—from initial access and evasion of EDR, through lateral movement and objective completion—while ensuring the safety, confidentiality, and operational integrity of every engagement.

You’ll also contribute to our capability development, tooling, and methodologies, while mentoring the next generation of Red Teamers and representing NCC Group in client-facing engagements, including with C-level stakeholders.

This role is central to advancing NCC Group’s offensive security capability while helping our clients understand, detect, and respond to sophisticated threats in real-world scenarios.

Key Accountabilities

You’ll lead the design, planning, and execution of Red Team and adversary simulation engagements across critical sectors such as financial services, government, and defence. These operations will align with frameworks such as CBEST, TIBER, CORIE, and more. You’ll also build strong stakeholder relationships, lead debriefs with both technical and executive audiences, and translate complex attack paths into clear, actionable insight.

Over the next 12–24 months, you'll establish yourself as a senior authority in the Red Teaming space, contribute to tooling and methodology development, mentor rising talent, and play an active role in growing our capability in both regulated and bespoke assessments.

Skills

You are an experienced operator who combines deep technical expertise with strong client-facing and leadership skills.



You’re comfortable running complex operations end-to-end and enjoy mentoring others while staying hands-on.

We’d love to see experience in:

- Designing and delivering complex adversary simulations
- Evading controls such as EDR/EPP and navigating defensive environments
- Microsoft AD, Office 365, cloud platforms (AWS, Azure, GCP), MacOS
- Stakeholder engagement, including executive-level briefings
- Report writing that balances narrative flow and technical accuracy

Desirable:

- Familiarity with CBEST, TIBER, CORIE, AASE, iCAST, FEER
- Experience building tools or automation for Red Team use
- Understanding of cybersecurity frameworks and regulatory standards

Certifications required:

- CREST CCT-INF is desired
- CREST CCSAS or CREST CCSAM is highly desired.

What do we Offer in Return?

We have a high-performance culture which is balanced evenly with world-class well-being initiatives and benefits:

- Flexible working

Financial & Investment
- Pension
- Life Assurance
- Share Save Scheme
- Maternity & Paternity leave

‍‍ Employee Referral Program
Lifestyle & Wellness
Learning & Development

About NCC Group

We assess, develop and manage cyber threats across our increasingly connected society. We advise global technology, manufacturers, financial institutions, critical national infrastructure providers, retailers and governments on the best way to keep businesses, software and personal data safe.

With our knowledge,



experience and general footprint, we are best placed to help businesses identify, assess, mitigate & respond to the risks they face.

We are passionate about making the Internet safer and revolutionising the way in which organisations think about cyber security.

Headquartered in Manchester, UK, with over 35 offices across the world, NCC Group employs more than 2,000 people and is a trusted advisor to 15,000 clients worldwide.

We review every application received and will get in touch if your skills and experience match what we’re looking for. If you don’t hear back from us within 10 days, please don’t be too disappointed – we may keep your CV on our database for any future vacancies and we would encourage you to keep an eye on our career opportunities as there may be other suitable roles.

To ensure a fair and consistent assessment process, candidates must not use AI tools to generate, suggest, coach or provide responses during live or recorded interviews unless this has been approved in advance, by the hiring team. For more information please read our AI in Hiring - Candidate Policy.

If you do not want us to retain your details, you can utilise the Manage Your Data tool provided by Pinpoint or contact us directly at: [email protected]. All personal data is held in accordance with the NCC Group Privacy Notice.

We are committed to diversity and flexibility in the workplace. If you require any reasonable adjustments to support you during the application process, please tell us at any stage.

Please note that this role involves mandatory pre-employment background checks due to the nature of the work NCC Group does. To apply, you must be willing and able to undergo the vetting process.

📌 Executive Principle Consultant - Red Team (Madrid)
🏢 Ncc Group
📍 Madrid