Exercise Lead Specialist

4 giorni fa

Rome Italy Leonardo Tempo pieno
Questa posizione è in Leonardo Riassunto dell'opportunità da parte della Joinrs AI: Leonardo cerca un Exercise Lead Specialist per il GCAP HQ di Reading (UK), con laurea e certificazioni specifiche in ambito cybersecurity. Il ruolo prevede la pianificazione e l’esecuzione di esercitazioni di sicurezza offensive per rafforzare la difesa aziendale. I candidati ideali possiedono competenze tecniche, visione strategica e capacità comunicative. Offerto contratto permanente in modalità ibrida. Il processo di selezione sarà interamente gestito da Leonardo. Leonardo is an international industrial group, among the main global realities in Aerospace, Defense, and Security that creates multi-domain technological capabilities in Helicopters, Aircraft, Aerostructures, Electronics, Cyber Security, and Space. With over 60,000 employees worldwide, the company has a strong industrial presence in Italy, the United Kingdom, Poland, the United States, and operates in 150 countries also through controlled companies, joint ventures, and shareholdings. A protagonist in the main strategic programs at a global level, it is a technological and industrial partner of Governments, Defense Administrations, Institutions, and companies. Leonardo is one of the strategic industrial partners of the GCAP (Global Combat Air Programme) program, along with the British BAE Systems and the Japanese Mitsubishi Heavy Industries, aimed at the development and realization of a new generation air system, defined as a “system of systems.” Employed for multi-domain operations in the defense sector, the system will be characterized by a “core platform” connected with other peripheral “adjuncts” systems, piloted and unpiloted. The program, among the most challenging and futuristic for the aerospace and defense industry, will lead the technological revolution that will characterize the sector in the next fifty years. A challenge aimed at strengthening the technological and industrial sovereignty of the countries involved, because it aims to identify and make available those innovative, enabling technologies that will ensure the generational leap, generating positive returns and economic and social progress for the entire Country system, for the benefit of new generations. The resources that will work within this program will have the opportunity to access a professional growth path in an international and technologically advanced context. Within the Joint Venture established for the realization of the GCAP Program, we are looking for the figure of Exercise Lead Specialist for the GCAP Headquarters located in Reading (UK). OBJECTIVE OF THE ASSIGNMENT: The Exercise Lead Specialist supports the planning, execution, and continuous improvement of adverse security assessment activities within the organization. The role assists the Exercise Manager in designing realistic threat emulation scenarios and ensures that red team operations produce significant evidence and insights, capable of strengthening the company's defensive posture. The ideal candidate combines technical skills, strategic vision, operational rigor, and strong communication skills.

RESPONSIBILITIES:
The resource will be part of the Operations function for the JV and will report directly to the Exercise Manager. TASKS:
- Planning and Execution of Exercises Support end-to-end red team operations, including reconnaissance, threat modeling, scenario design, and post-exercise analysis. Collaborate with blue teams, purple teams, and relevant stakeholders (e.g., Thames Valley Police) to ensure safe, controlled, and effective execution. Support operational security, risk management, and deconfliction processes during exercises.
- Reporting and Communication Draft clear and operational reports, translating technical results into business-relevant insights. Present results to senior management, including risk assessments and recommended remediation strategies, including system security strengthening where appropriate. Collaborate with defensive teams to validate any gaps in detection mechanisms and support purple team improvement cycles.
- Governance and Compliance Ensure all red team activities comply with legal, ethical, and organizational guidelines. Maintain documentation, authorizations, and traceability (audit trail) for all exercises. Contribute, when necessary, to incident response preparedness and tabletop exercises. Success Indicators Red team exercises capable of truly challenging the organization and identifying concrete and realistic vulnerabilities. Strong collaborations with defensive teams that result in measurable improvements in detection and response capabilities.

REQUIREMENTS:
Academic Qualification in line with the activities foreseen by the role
- Certifications such as Global Information Assurance Certification (GIAC) Red Teaming (GRT) or equivalent.
- Experience in threat intelligence, incident response, or purple teaming activities.
- Familiarity with