[Hiring] Red Team Director @Barclays

Role Description

To identify potential vulnerabilities within the banks IT systems using penetration testing tools and techniques to ensure security of computer systems, applications, servers, and networks.

• Development and execution of assessments, audits, and threat models to identify vulnerabilities within the banks systems, applications and servers using penetration tools and techniques, and communicate key findings and recommendations to stakeholders.
• Collaboration with stakeholders and IT teams to identify emerging cyber-attack techniques, tools and technologies and to support the development of penetration testing methodologies.
• Development and maintenance of comprehensive documents and reports for senior stakeholders on penetration test findings, and remediation guidance.
• Collaboration with stakeholders to understand their security requirements and controls in business processes, application/services, to enhance overall security posture and assurance.
• Identification of emerging vulnerabilities, exploit codes and cyber-attacks to develop testing methodologies and assurance activities.

Qualifications

• Extensive knowledge of how the function integrates with the business division / Group to achieve overall business objectives.
• Broad and comprehensive knowledge of industry theories and practices within own discipline alongside up-to-date relevant sector / functional knowledge, and insight into external market developments / initiatives.
• Ability to use interpretative thinking and advanced analytical skills to solve problems and design solutions in often complex/ sensitive situations.
• Experience in negotiating with and influencing stakeholders at a senior level both internally and externally.

Requirements

• Manage a business function, providing significant input to function wide strategic initiatives.
• Contribute to and influence policy and procedures for the function and plan, manage and consult on multiple complex and critical strategic projects, which may be business wide.
• Manage, coordinate and enable resourcing, budgeting and policy creation for a significant sub-function.
• Escalate breaches of policies / procedure appropriately.
• Foster and guide compliance, ensuring regulations are observed that relevant processes are in place to facilitate adherence.
• Demonstrate leadership behaviours to create an environment for colleagues to thrive and deliver to a consistently excellent standard.
• All colleagues will be expected to demonstrate the Barclays Values of Respect, Integrity, Service, Excellence and Stewardship.
• Demonstrate the Barclays Mindset – to Empower, Challenge and Drive.

Benefits

• Shape and deliver a senior-level red teaming strategy that strengthens cyber resilience, improves organisational readiness for major threat scenarios, and directly influences CISO strategy, security investment decisions, and enterprise control priorities.
• Lead the transformation of the red team by expanding into purple teaming while strengthening existing adversary emulation assessments.
• Improve the effectiveness of cyber offensive and defence teams by raising technical capability, strengthening tradecraft, and ensuring colleagues are better prepared to detect, respond to, and recover from advanced adversarial activity.
• Ensure red team activity supports regulatory expectations and control effectiveness, bringing credible CBEST and regulatory experience to strengthen assurance, governance, and operational resilience.
• Provide visible leadership across a distributed technical team, engaging senior technology stakeholders, securing buy-in for campaign priorities, and creating momentum behind a more collaborative red team operating model.
• Build future-ready offensive security capability by hiring and developing high-caliber talent, leveraging AI in testing approaches, and expanding exercises to assess AI-enabled systems and emerging threat techniques.