Location
Central London

Hours
Full Time

Salary
Negotiable

About the Role
This opportunity within the Offensive Security Operations team is a crucial role for managing vulnerability discovery, offensive testing, and remediation activities across the group to protect the business from sophisticated cyber threats. You will work closely with 3rd party vendors to plan and facilitate testing programmes, ensuring efficient delivery. Programmes include Regulatory Threat Intelligence Led Pen Testing (TLTP) and Red Teaming, Bug Bounty, Continuous External Attack Surface Management, Active Directory security posture management, and any future initiatives aimed at reducing cyber risk at scale.
The role requires you to be a domain authority on vulnerability testing, impact, and remediation, providing insight on root cause analysis and scalable risk management. You will collaborate closely with technical teams and external stakeholders such as BISOs, GSOC, and regulators. Staying ahead of emerging cybersecurity thought leadership is essential, as is sharing ideas for continuous improvement and innovation. There are opportunities to explore and experiment with AI and automation to enhance existing and future security initiatives.

Experience
Background in Red Teaming, Penetration Testing, or Bug Bounty is advantageous. Experience building AI agentic workflows or deploying and managing security tooling is also beneficial. Understanding of large-scale enterprise IT system environments and knowledge of security vulnerabilities, common software engineering flaws, and network defence analytical models (Kill Chain, ATT&CK, OWASP Top 10, etc.) is required.

About you
Strong verbal and written communication and presentation skills. Ability to work in a fast-paced environment as a problem solver and barrier breaker with initiative. Collaborative mindset with a passion for innovation and continuous improvement.

Qualifications
Technology-related Bachelor's Degree or equivalent experience and certifications in cybersecurity.