Stott and May
Penetration Testing Practice Lead
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Penetration Testing Practice Lead
Location: London, UK (Hybrid) - Once a week minimum
Salary: £85,000 - £100,000
Are you ready to lead the next phase of offensive security growth?
We’re hiring a hands-on Penetration Testing Lead to shape, scale, and elevate a growing cyber security practice following major investment and expansion
- Own and grow the offensive security function across penetration testing, red team, blue team, and purple team services.
- Lead, mentor, and develop a team of skilled security consultants.
- Stay hands-on with complex technical assessments and high-value client engagements.
- Set testing methodologies, reporting standards, QA processes, and technical best practice.
- Work closely with senior leadership and commercial teams on scoping, proposals, and client presentations.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Responsibilities
- Deliver and oversee penetration testing across web apps, APIs, cloud, infrastructure, wireless, and mobile environments.
- Support advanced red team, blue team, purple team, and threat emulation exercises.
- Review technical reports and ensure findings land clearly with technical and executive stakeholders.
- Drive service improvement across tooling, frameworks, methodologies, and delivery quality.
- Balance team leadership, client engagement, and hands-on technical delivery.
- Advanced red team operations, adversary simulation, or breach and attack simulation.
- Cloud security testing across AWS, Azure, or Google Cloud Platform.
- Container, Kubernetes, Docker, CI/CD, social engineering, AI security, or C2 framework experience.
- Contributions to the security community through blogs, talks, research, or events.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Skills
- Strong hands-on penetration testing experience across multiple security domains.
- Proven experience leading technical teams and delivering offensive security engagements.
- Deep knowledge of OWASP, PTES, OSSTMM, exploitation methods, and modern attack techniques.
- Confidence with tools such as Burp Suite, Nmap, Metasploit, Nessus, Qualys, and Kali Linux.
- Excellent communication skills, commercial awareness, and strong client-facing experience.
- CREST CRT/CCT, OSCP, OSCE, OSWE, CISSP, CHECK Team Member, or CHECK Team Leader would be highly desirable.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location