Red Team Director

Barclays•Working From Home, UK, NJ

23h

About The Position

The purpose of the role is to identify potential vulnerabilities within the banks IT systems using penetration testing tools and techniques to ensure the security of computer systems, applications, servers, and networks. The Director will shape and deliver a senior-level red teaming strategy that strengthens cyber resilience, improves organisational readiness for major threat scenarios, and directly influences CISO strategy, security investment decisions, and enterprise control priorities. This role involves leading the transformation of the red team by expanding into purple teaming while strengthening existing adversary emulation assessments, embedding real-time collaboration with the SOC to accelerate vulnerability remediation and measurable security improvement. The Director will improve the effectiveness of cyber offensive and defence teams by raising technical capability, strengthening tradecraft, and ensuring colleagues are better prepared to detect, respond to, and recover from advanced adversarial activity. Additionally, the role ensures red team activity supports regulatory expectations and control effectiveness, bringing credible CBEST and regulatory experience to strengthen assurance, governance, and operational resilience. The Director will provide visible leadership across a distributed technical team, engaging senior technology stakeholders, securing buy-in for campaign priorities, and creating momentum behind a more collaborative red team operating model. Finally, the Director will build future-ready offensive security capability by hiring and developing high-caliber talent, leveraging AI in testing approaches, expanding exercises to assess AI-enabled systems and emerging threat techniques, and helping the organization shift security left so controls are built in earlier across the technology lifecycle.

Requirements

Significant input to function wide strategic initiatives.
Influence policy and procedures for the function.
Plan, manage and consult on multiple complex and critical strategic projects.
Manage the direction of a large team or sub-function, leading other people managers.
Embed a performance culture aligned to the values of the business.
Lead organisation wide projects.
Act as deep technical expert and thought leader.
Identify new ways of working and collaborating cross functionally.
Train, guide and coach less experienced specialists.
Provide information affecting long term profits, organisational risks and strategic decisions.
Provide expert advice to senior functional management and committees.
Influence decisions made outside of own function.
Manage, coordinate and enable resourcing, budgeting and policy creation for a significant sub-function.
Escalate breaches of policies / procedure appropriately.
Foster and guide compliance.
Ensure regulations are observed.
Focus on the external environment, regulators, or advocacy groups to both monitor and influence on behalf of Barclays.
Demonstrate extensive knowledge of how the function integrates with the business division / Group to achieve the overall business objectives.
Maintain broad and comprehensive knowledge of industry theories and practices within own discipline.
Maintain up-to-date relevant sector / functional knowledge.
Maintain insight into external market developments / initiatives.
Use interpretative thinking and advanced analytical skills to solve problems and design solutions in often complex/ sensitive situations.
Exercise management authority to make significant decisions and certain strategic decisions or recommendations within own area.
Negotiate with and influence stakeholders at a senior level both internally and externally.
Act as principal contact point for key clients and counterparts in other functions/ businesses divisions.
Act as a spokesperson for the function and business division.
Demonstrate a clear set of leadership behaviours to create an environment for colleagues to thrive and deliver to a consistently excellent standard.
Shape and deliver a senior-level red teaming strategy.
Strengthen cyber resilience.
Improve organisational readiness for major threat scenarios.
Directly influence CISO strategy, security investment decisions, and enterprise control priorities.
Lead the transformation of the red team by expanding into purple teaming.
Strengthen existing adversary emulation assessments.
Embed real-time collaboration with the SOC to accelerate vulnerability remediation and measurable security improvement.
Improve the effectiveness of cyber offensive and defence teams by raising technical capability.
Strengthen tradecraft.
Ensure colleagues are better prepared to detect, respond to, and recover from advanced adversarial activity.
Ensure red team activity supports regulatory expectations and control effectiveness.
Bring credible CBEST and regulatory experience to strengthen assurance, governance, and operational resilience.
Provide visible leadership across a distributed technical team.
Engage senior technology stakeholders.
Secure buy-in for campaign priorities.
Create momentum behind a more collaborative red team operating model.
Build future-ready offensive security capability by hiring and developing high-caliber talent.
Leverage AI in testing approaches.
Expand exercises to assess AI-enabled systems and emerging threat techniques.
Help the organization shift security left so controls are built in earlier across the technology lifecycle.

Nice To Haves

Credible CBEST and regulatory experience

Responsibilities

Development and execution of assessments, audits, and threat models to identify vulnerabilities within the banks systems, applications and servers using penetration tools and techniques, and communicate key findings and recommendations to stakeholders.
Collaboration with stakeholders and IT teams to identify emerging cyber-attack techniques, tools and technologies and to support the development of penetration testing methodologies.
Development and maintenance of comprehensive documents and reports for senior stakeholders on penetration test findings, and remediation guidance.
Collaboration with stakeholders to understand their security requirements and controls in business processes, application/services, to enhance overall security posture and assurance.
Identification of emerging vulnerabilities, exploit codes and cyber-attacks to develop testing methodologies and assurance activities.
Manage a business function, providing significant input to function wide strategic initiatives.
Contribute to and influence policy and procedures for the function and plan, manage and consult on multiple complex and critical strategic projects, which may be business wide.
Manage the direction of a large team or sub-function, leading other people managers and embedding a performance culture aligned to the values of the business.
Lead organisation wide projects and act as deep technical expert and thought leader, identifying new ways of working and collaborating cross functionally.
Train, guide and coach less experienced specialists and provide information affecting long term profits, organisational risks and strategic decisions.
Provide expert advice to senior functional management and committees to influence decisions made outside of own function, offering significant input to function wide strategic initiatives.
Manage, coordinate and enable resourcing, budgeting and policy creation for a significant sub-function.
Escalate breaches of policies / procedure appropriately.
Foster and guide compliance, ensure regulations are observed that relevant processes in place to facilitate adherence.
Focus on the external environment, regulators, or advocacy groups to both monitor and influence on behalf of Barclays, when appropriate.
Demonstrate extensive knowledge of how the function integrates with the business division / Group to achieve the overall business objectives.
Maintain broad and comprehensive knowledge of industry theories and practices within own discipline alongside up-to-date relevant sector / functional knowledge, and insight into external market developments / initiatives.
Use interpretative thinking and advanced analytical skills to solve problems and design solutions in often complex/ sensitive situations.
Exercise management authority to make significant decisions and certain strategic decisions or recommendations within own area.
Negotiate with and influence stakeholders at a senior level both internally and externally.
Act as principal contact point for key clients and counterparts in other functions/ businesses divisions.
Act as a spokesperson for the function and business division.
Demonstrate a clear set of leadership behaviours to create an environment for colleagues to thrive and deliver to a consistently excellent standard.
Shape and deliver a senior-level red teaming strategy that strengthens cyber resilience, improves organisational readiness for major threat scenarios, and directly influences CISO strategy, security investment decisions, and enterprise control priorities.
Lead the transformation of the red team by expanding into purple teaming while strengthening existing adversary emulation assessments, embedding real-time collaboration with the SOC to accelerate vulnerability remediation and measurable security improvement.
Improve the effectiveness of cyber offensive and defence teams by raising technical capability, strengthening tradecraft, and ensuring colleagues are better prepared to detect, respond to, and recover from advanced adversarial activity.
Ensure red team activity supports regulatory expectations and control effectiveness, bringing credible CBEST and regulatory experience to strengthen assurance, governance, and operational resilience.
Provide visible leadership across a distributed technical team, engaging senior technology stakeholders, securing buy-in for campaign priorities, and creating momentum behind a more collaborative red team operating model.
Build future-ready offensive security capability by hiring and developing high-caliber talent, leveraging AI in testing approaches, expanding exercises to assess AI-enabled systems and emerging threat techniques, and helping the organization shift security left so controls are built in earlier across the technology lifecycle.