Description
This Offensive Security Engineer role within the Offensive Security Operations team is crucial for managing vulnerability discovery, offensive testing, and remediation activities across the group, protecting the business from sophisticated cyber threats.
The successful applicant will work with 3rd party vendors to plan and facilitate testing programmes, including Regulatory Threat Intelligence Led Pen Testing (TLTP) and Red teaming, Bug Bounty, Continuous External Attack Surface Management, and Active Directory security posture management.
As a domain authority on vulnerability testing, impact, and remediation, the role holder will provide insight on root cause analysis and scalable risk management, working closely with technical and external teams.
Responsibilities:
- Collaborate with external vendors, regulators, and leadership teams to coordinate the timely delivery of requirements
- Review vulnerability reports, validate issues reported, and triage based on risk
- Support teams in understanding vulnerabilities and validate fixes through retesting
- Coordinate remediation efforts by detailing actions, owners, timelines, and follow-up when appropriate
- Leverage engineering skills to automate and scale security programme objectives
Requirements:
- Technology-related Bachelor's Degree or equivalent experience and certifications in cyber security
- Background in Red Teaming / Penetration Testing / Bug Bounty advantageous
- Experience building AI agentic workflows or deploying and managing security tooling is also advantageous
- Understanding of large-scale enterprise IT system environments
- Knowledge of security vulnerabilities and common software engineering flaws and Network Defence analytical models
- Strong verbal & written communication skills & presentation skills
- Ability to work in a fast-paced environment as a problem solver and barrier breaker with initiative