Rodeo
Get started

Leonardo

Lead Pentester

Bristol
Posted 1 day ago
Sign up to applySee more jobs like this
Get notified of more jobs like this · No spam, ever

How your CV stacks up

1Upload CV
2Analyse CV
3Improve CV

Upload your CV to see how well it fits this job role

?%

Job Description

Your Impact

Leonardo is seeking an experienced CHECK Team Leader (CTL) to join our growing Offensive Security capability.

Working within a defence-focused environment, you will lead and deliver penetration testing activities across enterprise IT, cloud, applications, and operational technology environments, supporting customers operating within complex and high-assurance systems.

As one of Leonardo's senior penetration testing specialists, you will be responsible for planning, scoping, delivering, quality assuring, and reporting on penetration testing engagements in accordance with NCSC CHECK standards and industry best practice. You will work directly with customers to identify and validate security risks, provide practical remediation advice, and help strengthen the resilience of critical systems that support UK national security.

This role offers the opportunity to be more than a delivery consultant. Alongside technical engagements, you will contribute to the development of Leonardo's offensive security capability, supporting service development, mentoring junior consultants, improving testing methodologies, and helping shape future service offerings.

You will work closely with cyber security specialists across Leonardo, combining hands-on technical delivery with stakeholder engagement, capability development and continuous improvement activities. We are looking for someone who enjoys solving complex technical challenges, maintaining high professional standards and helping develop the next generation of penetration testing talent.

What You'll Do as a CHECK Team Leader

  • Deliver Penetration Testing Engagements

    • Lead and deliver infrastructure, web application, API, cloud, wireless and operational technology penetration testing activities across defence and government environments. Assess the effectiveness of security controls and provide actionable recommendations that improve customer security posture.
  • Engagement Planning and Scoping

    • Work with customers and project teams to define scope, objectives, constraints and rules of engagement. Ensure testing activities are appropriately planned, authorised and delivered in line with NCSC CHECK requirements.
  • Technical Leadership and Quality Assurance

    • Provide technical leadership during engagements and act as a subject matter expert for penetration testing activities. Review testing outputs and reports to ensure quality, accuracy and consistency.
  • Reporting and Risk Communication

    • Produce high-quality technical and executive reports, translating complex technical findings into clear business risks and practical remediation advice suitable for both technical and non-technical stakeholders.
  • Capability Development

    • Support the ongoing development of Leonardo's offensive security services, contributing to methodologies, tooling, testing standards and service offerings.
  • Mentoring and Knowledge Sharing

    • Support the development of junior consultants and CHECK Team Members (CTMs) through coaching, peer review, technical guidance and knowledge sharing activities.
  • Research and Innovation

    • Maintain awareness of emerging threats, attack techniques, vulnerabilities and testing approaches. Apply new knowledge and techniques to improve customer outcomes and service delivery.

Reasons to use Rodeo

I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?

Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.

Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.

Start with a chat, not a search bar

Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.

P

Graduate Consultant — 2026 Scheme

PwC·London, UK
£35,000/yr

Why you're a good match

Strong

Your economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.

See breakdown
Save jobNot relevant
View details

It searches the market for you

Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.

Why you're a good match

You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.

See breakdown
Strong

Experience fit

Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.

See breakdown
Strong

Only hits

No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.

  • Customer and Stakeholder Engagement

    • Build trusted relationships with customers, project teams and security stakeholders throughout the engagement lifecycle, from initial planning through to final reporting and remediation discussions.
  • Core Consulting Skills

    • Building client relationships; adaptability to changing schedules; reliability and quality of delivery; flexibility in working arrangements; collaboration and teamwork.

What You'll Get

  • Professional Development

    • Access to industry-recognised training, conferences and certification support, including advanced CREST, OffSec and specialist technical development pathways.
  • Technical Growth

    • Opportunities to work across diverse penetration testing assignments spanning Defence, Government, Critical National Infrastructure and emerging technologies.
  • Capability Development

    • Contribute to the growth of Leonardo's Offensive Security capability, influencing future service offerings, methodologies and technical standards.
  • Research and Innovation Time

    • Dedicated opportunities to explore emerging attack techniques, tooling, cloud security, automation and offensive security research.

What You'll Bring

We are looking for a motivated and self-driven security professional with a passion for offensive security and a strong commitment to technical excellence. This role would suit an experienced pentester looking to lead engagements and support the growth of a mature offensive security function.

Core Areas (Must Have)

  • Current CREST CHECK Team Leader (CTL) qualification.
  • Experience delivering penetration testing engagements across one or more of:
    • Infrastructure
    • Web Applications
    • APIs
    • Cloud Platforms
    • Wireless Networks
    • Operational Technology
  • Excellent technical report writing skills for both technical and executive audiences.
  • Strong stakeholder engagement and client-facing consulting skills.
  • Experience planning, leading and assuring penetration testing engagements.
  • Good understanding of common security frameworks and standards.
  • Ability to identify and communicate security risks and remediation actions effectively.
  • Experience using scripting or automation languages such as Python, PowerShell, Bash or similar.
  • Strong analytical and problem-solving capability.
  • Willingness to travel to customer locations when required.
  • Ability to attain SC clearance and potentially higher levels of National Security Vetting.

Desirable

  • Existing SC or DV clearance.
  • Experience operating within Defence, MOD or National Security environments.
  • CREST CCT qualifications.
  • CCT, OSCP, OSEP, OSWE, CRTO or equivalent certifications.
  • Experience with cloud security testing (AWS, Azure, GCP).
  • Experience with OT/ICS security testing.
  • Experience developing tools, automation or testing frameworks.
  • Experience mentoring junior penetration testers and conducting quality assurance reviews.
  • Knowledge of NCSC CAF, NIST, ISO 27001 and MITRE ATT&CK.

This is not an exhaustive list, and we are keen to hear from you even if you might not have experience in all the above. The most important skill is a good attitude and willingness to learn.

Get help with your application

Your very own career expert that helps elevate your application to the next level.

Get help applying for this job

Security Clearance

This role is subject to pre-employment screening in line with the UK Government’s Baseline Personnel Security Standard (BPSS). An additional range of Personnel Security Controls referred to as National Security Vetting (NSV) may apply, this could include meeting the eligibility requirements for The Security Check (SC) or Developed Vetting (DV). For more information and guidance please visit: https://careers.uk.leonardo.com/gb/en/security-and-vetting

Why Join Us

At Leonardo, our people are at the heart of everything we do. We offer a comprehensive, company-funded benefits package that supports your wellbeing, career development, and work–life balance. Whether you're looking to grow professionally, care for your health, or plan for the future, we’re here to help you thrive.

  • Time to Recharge
    • Enjoy generous leave with the opportunity to accrue up to 12 additional flexi-days each year.
  • Secure your Future
    • Benefit from our award-winning pension scheme with up to 15% employer contribution.
  • Your Wellbeing Matters
    • Free access to mental health support, financial advice, and employee-led networks championing inclusion and diversity (Enable, Pride, Equalise, Armed Forces, Carers, Wellbeing and Ethnicity).
  • Rewarding Performance
    • All employees at management level and below are eligible for our bonus scheme.
  • Never Stop Learning
    • Free access to 4,000+ online courses via Coursera and LinkedIn Learning.
  • Refer a Friend
    • Receive a financial reward through our referral programme.
  • Tailored Perks
    • Spend up to £500 annually on flexible benefits including private healthcare, dental, family cover, tech & lifestyle discounts, gym memberships and more.
  • Flexible Working
    • Flexible hours with hybrid working options. For part time opportunities, please talk to us about what might be possible for this role.

For a full list of our company benefits please visit our website.

Leonardo UK operates a grade-based salary framework with broad bands. The salary range shown reflects the approved grade band for this role, or a narrower hiring range published within that band, and is benchmarked against the external market. Exceptions above the standard range are managed through governance controls to protect internal equity.

Leonardo is a global leader in Aerospace, Defence, and Security. Headquartered in Italy, we employ over 53,000 people worldwide including 8,500 across 9 sites in the UK. Our employees are not just part of a team—they are key contributors to shaping innovation, advancing technology, and enhancing global safety.

At Leonardo we are committed to building an inclusive, accessible, and welcoming workplace. We believe that a diverse workforce sparks creativity, drives innovation, and leads to better outcomes for our people and our customers. If you have any accessibility requirements to support you during the recruitment process, just let us know.

Be part of something bigger - apply now!

Primary Location: GB - Bristol - Coldharbour Lane

Contract Type: Permanent

Hybrid Working: Hybrid

Trusted by 25,000+ job seekers

“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”

Jessica, London

Get help applying for this job

Location

Bristol, England, United Kingdom

Sign up to applySee more jobs like this