Offensive Security Engineer
Core
Manage vulnerability discovery, offensive testing, and remediation activities across the group to protect the business from sophisticated cyber threats.
Role type
Senior Associate Offensive Security Engineer
Builds
Scalable security programs including regulatory threat intelligence-led pen testing, red teaming, bug bounty, and continuous external attack surface management.
Domain
Cybersecurity / Financial Markets Infrastructure
Required skills
Vulnerability testing and remediation, Red Teaming, Penetration Testing, Bug Bounty, Active Directory security posture management, Root cause analysis, Scalable risk management, AI agentic workflows, Security tooling deployment, Large scale enterprise IT environments, Network Defence analytical models (Kill Chain, ATT&CK, OWASP top 10)
Preferred skills
Building AI agentic workflows, Deploying and managing security tooling
Technologies
AI agentic workflows, Security tooling
Responsibilities
Collaborate with external vendors, regulators, and leadership teams to coordinate timely delivery of requirements; Review vulnerability reports, validate issues, and triage based on risk; Support teams in understanding vulnerabilities and validate fixes through retesting; Coordinate remediation efforts by detailing actions, owners, timelines, and follow-up; Leverage engineering skills to automate and scale security programme objectives.
Seniority
Senior Associate, hands-on IC
