The Practical Red Team ManagerA real-world guide to leading offensive security with judgement, trust and accountability.Red Team leadership begins where technical expertise alone is no longer enough.This is not a book about becoming the most technical operator in the room. It is about becoming the person trusted to lead Red Team operations safely, legally and effectively, managing the people, the work, the client, the risk and the outcome.It is about setting clear direction, building capable teams and making sound decisions when the pressure is high and the answers are rarely straightforward. It is also about knowing when to challenge a request, when to pause an operation and how to protect the trust placed in you.From the first client conversation to scoping, legal authority, ethics, governance, delivery, reporting and board communication, The Practical Red Team Manager explores what it really means to take responsibility for high-stakes offensive security work.Drawing on lessons from real-world leadership and complex engagements, it examines how to balance offensive ambition with professional restraint, and how to turn technical activity into meaningful business value.This is the book I wish someone had given me before I became responsible for people, clients, legal exposure and high-risk offensive engagements.One book. One central question:How do you lead Red Team operations responsibly while delivering work that is safe, proportionate, valuable and trusted?Because a successful Red Team engagement is not defined only by what was compromised. It is defined by what was learned, how safely the work was delivered and whether the organisation is stronger because of it.

#! Book Launch Q4 2026

‘Great Red Team Managers are remembered not for the systems they compromised, but for the trust they built, the people they developed, and the organisations they helped become more resilient.’

Who’s this book for?• Red Team leads.
• Senior Penetration Testers moving into leadership.
• Security Managers buying Red Team services.
• Consultants who need to understand delivery governance.
• Boards and CISOs who want to understand what ‘good’ looks like.

About The AuthorShaun Peapell is a Chartered Cyber Security Professional (ChCSP) and a Cyber Scheme Red Team Manager (CSRTM), with more than three decades of experience across military, law enforcement and commercial cybersecurity.Throughout his career he has led complex penetration testing, intelligence-led Red Team engagements and offensive security programmes for organisations ranging from small businesses to critical national infrastructure and global enterprises.In addition to his current professional qualifications, Shaun has previously held a number of respected industry certifications, including CREST Certified Tester (Infrastructure) Team Leader (CCT Inf), CREST Certified Simulated Attack Manager (CCSAM), Threat Intelligence Analyst and Intrusion Detection Analyst certifications.His work has always combined technical expertise with practical leadership, helping organisations understand not just how attacks happen, but how to manage offensive security safely, legally and effectively.Today, Shaun has a particular passion for the rapidly evolving field of Artificial Intelligence (AI), with a strong focus on both offensive and defensive AI security. His interests include AI-assisted Red Teaming, Large Language Model security, Agentic AI applications, AI governance and the practical application of AI to improve cyber defence. He believes AI represents one of the most significant shifts in cybersecurity in decades and is committed to helping organisations understand both its opportunities and its risks. This book reflects the lessons, successes and occasional mistakes accumulated throughout his career.Rather than focusing solely on technical tradecraft, it is intended to help the people responsible for managing Red Team engagements, those trusted to balance offensive capability with ethics, legality, business objectives and professional judgement.

Book Contents

The Practical Red Team ManagerCopyright & Publication InformationDisclaimerAcknowledgementsIntroductionThe Moment You BecomeResponsibleAbout The AuthorWho’s this book for?Understanding The Value Of Red Team EngagementsStories From DownrangeLessons From DownrangeConclusionAppendix 1: Cyber Security Acronyms & Jargon Buster ReferencesAppendix 2: Common Red Team & Offensive Security TermsAppendix 3: AI and Emerging Technology TermsAppendix 4: Governance & Risk TermsAppendix 5: Defensive Security TermsAppendix 6: Useful People, Roles & Role Acronyms

Book Chapters

Chapter 1 - What A Red Team Manager Actually DoesChapter 2 - Red Teaming, Penetration Testing & Vulnerability AssessmentsChapter 3 - The Legal Foundation & Permission Before ActionChapter 4 - Ethics, Safety & ProportionalityChapter 5 - Understanding The Client’s Real ObjectiveChapter 6 - Scoping The Engagement ProperlyChapter 7 - Building The Rules of EngagementChapter 8 - Threat Intelligence & Scenario DesignChapter 9 - Building & Managing The TeamChapter 10 - Technical Oversight Without MicromanagementChapter 11 - Managing Risk During DeliveryChapter 12 - Communication, Escalation & DeconflictionChapter 13 - Evidence, Notes & Professional DefensibilityChapter 14 - Working With Blue Teams & SOCsChapter 15 - Reporting That Actually MattersChapter 16 - Managing Business ExpectationsChapter 17 - When Things Go WrongChapter 18 - Frameworks, Standards & Regulatory ExpectationsChapter 19 - The Future Red Team Manager