Exercise Lead Specialist - Programma GCAP

Questa posizione è in Leonardo

Riassunto dell'opportunità da parte della Joinrs AI: Leonardo ricerca un Exercise Lead Specialist per la sede GCAP a Reading (UK), con esperienza e certificazioni nel settore della sicurezza informatica e competenze in threat emulation e red team operations. Il ruolo prevede la pianificazione e l’esecuzione di esercitazioni di sicurezza avanzate, con responsabilità di reporting e collaborazione con team multidisciplinari. L’opportunità offre un percorso di crescita internazionale in un contesto tecnologico avanzato, con contratto permanente e modalità di lavoro ibrida.

--

Leonardo is an international industrial group, among the world's leading companies in Aerospace, Defense, and Security that creates multi-domain technological capabilities in Helicopters, Aircraft, Aerostructures, Electronics, Cyber Security, and Space. With over 60,000 employees worldwide, the company has a strong industrial presence in Italy, the United Kingdom, Poland, the United States, and operates in 150 countries also through subsidiaries, joint ventures, and shareholdings. A key player in major global strategic programs, it is a technological and industrial partner for Governments, Defense Administrations, Institutions, and businesses.

Leonardo is one of the strategic industrial partners of the GCAP (Global Combat Air Programme), along with the British BAE Systems and the Japanese Mitsubishi Heavy Industries, aimed at the development and realization of a new generation aerial system, defined as a “system of systems.” Used for multi-domain defense operations, the system will feature a “core platform” connected with other peripheral “adjuncts” systems, both manned and unmanned.

This program, one of the most challenging and futuristic for the aerospace and defense industry, will drive the technological revolution that will characterize the sector in the next fifty years. A challenge aimed at strengthening the technological and industrial sovereignty of the countries involved, because it aims to identify and make available those innovative, enabling technologies that will ensure the generational leap, generating positive returns and economic and social progress for the entire country system, for the benefit of new generations.

The resources who will work within this program will have the opportunity to access a professional growth path in an international and technologically advanced context.

Within the Joint Venture established for the realization of the GCAP Program, we are looking for an Exercise Lead Specialist for the GCAP Headquarters located in Reading (UK).

OBJECTIVE OF THE ASSIGNMENT:

The Exercise Lead Specialist supports the planning, execution, and continuous improvement of adverse security assessment activities within the organization. The role assists the Exercise Manager in designing realistic threat emulation scenarios and ensures that red team operations produce significant evidence and insights, capable of strengthening the company's defensive posture.

The ideal candidate combines technical skills, strategic vision, operational rigor, and strong communication skills.

RESPONSIBILITIES:

The resource will be part of the Operations function for the JV and will report directly to the Exercise Manager.

DUTIES:

• Support end-to-end red team operations, including reconnaissance, threat modeling, scenario design, and post-exercise analysis.
• Collaborate with blue teams, purple teams, and relevant stakeholders (e.g., Thames Valley Police) to ensure safe, controlled, and effective execution.
• Support operational security, risk management, and deconfliction processes during exercises.

Reporting and Communication

• Draft clear and operational reports, translating technical results into business-relevant insights.
• Present results to senior management, including risk assessments and recommended remediation strategies, including strengthening system security where appropriate.
• Collaborate with defensive teams to validate any gaps in detection mechanisms and support purple team improvement cycles.

Governance and Compliance

• Ensure that all red team activities comply with legal, ethical, and organizational guidelines.
• Maintain documentation, authorizations, and traceability (audit trail) for all exercises.
• Contribute, when necessary, to incident response preparedness and tabletop exercises.

Success Indicators

• Red team exercises capable of truly challenging the organization and identifying concrete and realistic vulnerabilities.
• Strong collaborations with defensive teams that result in measurable improvements in detection and response capabilities.

REQUIREMENTS:

Educational Qualification in line with the activities foreseen by the role

• Certifications such as Global Information Assurance Certification (GIAC) Red Teaming (GRT) or equivalent.
• Experience in threat intelligence, incident response, or purple teaming activities.
• Familiarity with enterprise security controls, SIEM systems, EDR tools, and detection engineering.
• Experience in regulated sectors or large enterprise environments.

Technical and Soft Skills and Competencies:

Essential Requirements:

• Strong stakeholder management skills, with proven experience in communicating with senior management across different functions, both internal and external.
• Ability to make pragmatic decisions and to operate in close collaboration with the business.
• Proven problem-solving skills (forward and lateral thinking) applied to complex issues.
• Ability to independently manage one's areas of responsibility within a project, with full awareness of individual responsibilities.

Preferential Requirements:

• Analytical, structured, and detail-oriented approach.
• Discretion and reliability, with strong judgment in managing sensitive information.
• Confident communicator, capable of simplifying complex concepts for diverse audiences.
• Proactivity, curiosity, and commitment to continuous improvement.
• Ability to combine strategic vision and operational execution.

Language skills: English C1

Leonardo is an international industrial group and one of the world’s leading players in Aerospace, Defense, and Security, specialized in multi-domain technological capabilities in the fields of Helicopters, Aircraft, Aerostructures, Electronics, Cyber Security, and Space. With over 60,000 employees worldwide, the company has a strong industrial presence in Italy, the United Kingdom, Poland, and the United States, and operates in 150 countries, including through subsidiaries, joint ventures, and investments. A key player in major global strategic programs, Leonardo is a technological and industrial partner for governments, defense administrations, institutions, and businesses.

Leonardo is one of the strategic industrial partners in the GCAP (Global Combat Air Program), alongside the UK’s BAE Systems and Japan’s Mitsubishi Heavy Industries. This program aims to develop and deliver a next-generation air system, defined as a “system of systems.” Used for multi-domain defense operations, the system will feature a “core platform” connected to other peripheral systems, or “adjuncts,” both manned and unmanned.

This program, one of the most ambitious and forward-thinking in the aerospace and defense industries, will drive the technological revolution that will define the sector for the next fifty years. It is a challenge aimed at strengthening the technological and industrial sovereignty of the participating countries, as it focuses on identifying and making available enabling technologies that will ensure a generational leap. These technologies will generate positive returns, contributing to the economic and social progress of the entire nation, benefiting future generations.

Those working on this program will have the opportunity to access a career growth path in an internationally competitive and technologically advanced environment.

JOB TITLE:

Within the GCAP Joint Venture Security, we are looking for a Exercise Lead Specialist for GCAP HQ in Reading (UK).

JOB PURPOSE:

The Exercise Lead Specialist supports the planning, execution and continuous improvement of adversarial security assessments across the organization. This role helps the Exercise Manager to design realistic threat emulation scenarios and ensures red team operations deliver meaningful insights that strengthen the company’s defensive posture. The ideal candidate blends technical expertise with strategic thinking, operational discipline, and strong communication skills.

RESPONSIBILITIES:

The role will be part of the Operations function for the JV and will report directly to the Exercise Manager.

OBJECTIVES:

Exercise Planning & Execution

• Support end to end red team operations, including reconnaissance, threat modelling, scenario design and post exercise analysis.
• Work with blue teams, purple teams, and relevant stakeholders (e.g. Thames Valley Police) to ensure safe, controlled and effective execution.
• Support operational security, risk management and deconfliction processes during exercises.

Reporting & Communication

• Deliver clear, actionable reports that translate technical findings into business relevant insights.
• Present results to senior leadership, including risk assessments and recommended remediation strategies including system security hardening where appropriate.
• Collaborate with defensive teams to validate detection gaps and support purple team improvement cycles.

Governance & Compliance

• Ensure all red team activities adhere to legal, ethical and organizational guidelines.
• Maintain documentation, approvals and audit trails for all exercises.
• Contribute to incident response readiness and tabletop exercises when needed.

What Success Looks Like

• Red team exercises that meaningfully challenge the organization and uncover real world weaknesses.
• Strong partnerships with defensive teams that lead to measurable improvements in detection and response.

REQUIREMENTS:

Qualification:

• Certifications such as Global Information Assurance Certification (GIAC) Red Teaming (GRT), or similar.
• Experience in threat intelligence, incident response or purple teaming.
• Familiarity with enterprise security controls, SIEMs, EDR tools, and detection engineering.
• Background in regulated industries or large scale enterprise environments.

Technical Knowledge and Soft Skills:

Essential Requirements:

• Strong stakeholder management skills with a track record of communicating with senior leadership across multiple functions internally, and externally
• Ability for pragmatic decision making / ability to work with the business
• Proven problem solving (forward, lateral thinking) credentials in relation to complex issues
• Manages own areas of responsibility on a project and understands areas of personal responsibility

Desirable Requirements:

• Analytical, structured, and detail oriented.
• Discreet and trustworthy, with strong judgement in handling sensitive information.
• Confident communicator who can simplify complexity for diverse audiences.
• Proactive, curious, and committed to continuous improvement.
• Able to balance strategic thinking with hands on delivery.

Language Skills: English C1

Seniority: Experto

Primary Location: IT - Roma - Via Montello

Contract Type: Permanent

Hybrid Working: Ibrido

--

[#LI-REMOTE] [#J-MCITY] [#J-ENTERPRISE]