BDO Digital Offensive Senior Security Analyst

We're BDO, an accountancy and business advisory firm providing the advice and solutions businesses need to navigate today's changing world. Our clients are Britain's economic engine - ambitious, entrepreneurially-spirited and high growth businesses that fuel the economy.

Our Consulting team provides a wide variety of services that deliver value-led advice and outcomes. They have an in-depth knowledge of business, industry sectors and markets and understand the constantly changing risks and opportunities at the heart of our clients' affairs.

The Digital team within Consulting helps our clients create competitive advantage and uncover new avenues of growth and profitability through digital strategies. Strategies need to be bold, but they also need to deliver near-term results. That's why we take a practical approach that marries long-term vision with quick wins and measurable ROI milestones.

We are seeking a skilled Offensive Security penetration tester to join our dynamic team. This role involves conducting sophisticated penetration testing and red team engagements across various client systems and applications. You'll be instrumental in identifying vulnerabilities, enhancing client security postures, and leading initiatives to develop cutting-edge penetration testing methodologies and tools.

You'll have exposure to clients across industries and geographies, staying at the forefront of knowledge of the threat landscape, cyber defence best practices and regulatory expectations. There will be opportunities to gain experience with:

• Web applications and API testing
• Wireless assessments
• Internal infrastructure tests
• Mobile App security
• Red and Purple team operations
• Physical intrusion testing
• Hardware analysis

You’ll be someone with:

• Certification in penetration testing such as OSCP (Offensive Security Certified Professional), CTM (Check Team Member), CRT (CREST Registered Tester) and OSWA (Offensive Security Web Attacks).
• Experience in offensive security, professional penetration testing, red teaming, bug bounty work, capture-the-flag competitions, or personal research projects.
• Proven ability to deliver impactful client engagements, demonstrating both technical depth and a practical understanding of risk.
• Deep knowledge of network protocols, different services, operating systems, different applications and how to break them.
• Proficiency in tools such as Metasploit, Burp Suite or other proxies such as Caido or Zap, Nessus, CobaltStrike or other C2 frameworks.
• Excellent problem-solving skills and a passion for ethical hacking.
• Experience coding and scripting custom tools in Python, Bash, PowerShell.

At BDO, we're committed to helping you achieve your personal and professional goals. We provide structured development frameworks, resources, and mentorship to support your growth. We'll align your client engagements with your learning objectives, giving you the chance to apply new skills, explore areas of interest, and gain practical experience.

Mutual support and respect are one of BDO's core values and we're proud of our distinctive, people-centred culture. Our agile working framework helps us stay connected, bringing teams together where and when it counts so they can share ideas and help one another.

We know that collaboration is the key to creating value for the companies we work with and satisfying experiences for our colleagues, so we've invested in state-of-the-art collaboration spaces in our offices. BDO's people represent a wealth of knowledge and expertise, and we'll encourage you to build your network, work alongside others, and share your skills and experiences.

At BDO, we help entrepreneurial businesses to succeed, fuelling the UK economy. Our success is powered by our people, which is why we're always finding new ways to invest in you.