Lead Pentester

Leonardo is seeking an experienced CHECK Team Leader (CTL) to join our growing Offensive Security capability.

Working within a defence-focused environment, you will lead and deliver penetration testing activities across enterprise IT, cloud, applications, and operational technology environments, supporting customers operating within complex and high-assurance systems.

As one of Leonardo’s senior penetration testing specialists, you will be responsible for planning, scoping, delivering, quality assuring, and reporting on penetration testing engagements in accordance with NCSC CHECK standards and industry best practice. You will work directly with customers to identify and validate security risks, provide practical remediation advice, and help strengthen the resilience of critical systems that support UK national security.

This role offers the opportunity to be more than a delivery consultant. Alongside technical engagements, you will contribute to the development of Leonardo’s offensive security capability, supporting service development, mentoring junior consultants, improving testing methodologies, and helping shape future service offerings.

You will work closely with cyber security specialists across Leonardo, combining hands‑on technical delivery with stakeholder engagement, capability development and continuous improvement activities. We are looking for someone who enjoys solving complex technical challenges, maintaining high professional standards and helping develop the next generation of penetration testing talent.

• Deliver Penetration Testing Engagements

Lead and deliver infrastructure, web application, API, cloud, wireless and operational technology penetration testing activities across defence and government environments. Assess the effectiveness of security controls and provide actionable recommendations that improve customer security posture.

• Engagement Planning and Scoping

Work with customers and project teams to define scope, objectives, constraints and rules of engagement. Ensure testing activities are appropriately planned, authorised and delivered in line with NCSC CHECK requirements.

• Technical Leadership and Quality Assurance

Provide technical leadership during engagements and act as a subject matter expert for penetration testing activities. Review testing outputs and reports to ensure quality, accuracy and consistency.

• Reporting and Risk Communication

Produce high-quality technical and executive reports, translating complex technical findings into clear business risks and practical remediation advice suitable for both technical and non-technical stakeholders.

• Capability Development

Support the ongoing development of Leonardo’s offensive security services, contributing to methodologies, tooling, testing standards and service offerings.

• Mentoring and Knowledge Sharing

Support the development of junior consultants and CHECK Team Members (CTMs) through coaching, peer review, technical guidance and knowledge sharing activities.

• Research and Innovation

Maintain awareness of emerging threats, attack techniques, vulnerabilities and testing approaches. Apply new knowledge and techniques to improve customer outcomes and service delivery.

• Customer and Stakeholder Engagement

Build trusted relationships with customers, project teams and security stakeholders throughout the engagement lifecycle, from initial planning through to final reporting and remediation discussions.

• Core Consulting Skills

Building client relationships; adaptability to changing schedules; reliability and quality of delivery; flexibility in working arrangements; collaboration and teamwork.

• Professional Development. Access to industry‑recognised training,…