Director, Offensive Security

About the role

Lead the development of a differentiated offensive security capability within Grant Thornton’s Cyber Resilience practice, shaping AI‑enabled delivery models for both point‑in‑time and managed services.

Key responsibilities

• Define strategy, service offerings and operating model for an offensive security team delivering penetration testing, red‑team, purple‑team and continuous threat exposure management.
• Build an AI‑enabled, partner‑led delivery model to improve speed, quality and scalability while maintaining governance and client trust.
• Lead go‑to‑market activities, create propositions, campaigns and commercial models aligned with local market needs.
• Manage senior client relationships, translate technical findings into executive‑level risk insight and drive remediation.
• Recruit, develop and retain a high‑performing team, fostering a culture of curiosity, technical excellence and responsible innovation.

Required profile

• Significant senior experience in offensive security, penetration testing, red teaming or cyber consulting, including leading complex client engagements.
• Proven customer‑facing consulting and sales capability with ability to originate and shape opportunities.
• Strategic and commercial mindset with understanding of market trends, delivery economics and scalable offerings.
• Leadership experience managing technical and consulting teams across global and alliance partners.

Required skills

• Offensive security methods across application, infrastructure, cloud, identity, network and endpoint.
• AI, automation and modern tooling for cyber‑attack simulation and testing orchestration.
• Vulnerability management, attack surface management and Continuous Threat Exposure Management (CTEM).
• Familiarity with platforms such as Qualys, Tenable, Horizon3.ai, Rapid7, Microsoft Defender Vulnerability Management, CrowdStrike Falcon Exposure Management, Wiz, Orca Security, XM Cyber, Cymulate, Pentera and Nucleus Security.
• CREST credentials (Practitioner Security Analyst, Registered Penetration Tester, Certified).