A specialist UK cyber security consultancy is growing its managed external attack surface service and is looking for an Engineer to join the team early on. You’ll look at client organisations the way an attacker would, find what they didn’t know was exposed, and help them fix what really matters.
The role
You’ll investigate internet-facing assets, confirm whether flagged issues are real and exploitable, and turn messy external signals into clear, evidence-backed findings. Because the service is still taking shape, you’ll also help define how it runs: methodology, playbooks, automation and reporting.
What you’ll do
- Discover and track client internet-facing assets: domains, subdomains, IP ranges, cloud services, web apps and certificates
- Find unknown, unmanaged, legacy and third‑party infrastructure
- Safely validate findings such as misconfigurations, exposed services, dangling DNS, leaked credentials and public data exposure
- Assess exploitability, confidence and priority, and write clear remediation advice
- Report findings to technical teams and security leaders, in writing, remotely and in person
- Support hypothesis‑led external threat hunts alongside threat hunting and CTI colleagues
- Turn repeatable investigation work into scripts, checks and documented processes
What you’ll bring
- Hands‑on experience in recon, OSINT, attack surface discovery, vulnerability triage or exposure analysis
- A solid grasp of external attack techniques and initial access
- Good networking knowledge (HTTP, DNS, SMTP, SSH, RDP, SMB, TLS) and web security fundamentals
- Comfortable with Linux and the command line
- Clear written communication and strong documentation habits
Nice to have
- Bug bounty experience (HackerOne, Bugcrowd, Intigriti or similar)
- Python, Bash, Git or API work
- Shodan, Censys, passive DNS, certificate transparency or ASM tooling
- Cloud exposure knowledge across AWS, Azure or GCP
- Background in pentesting, threat hunting, CTI or incident response
#J-18808-Ljbffr
Attack Surface Analyst in London employer: Cyber Search Partners
Join a dynamic and rapidly expanding cyber security consultancy that values high performance and offers equity participation for its top achievers. With a supportive team culture and clear pathways for progression, this remote role allows you to thrive in a fast-paced environment while building meaningful relationships with industry leaders. Embrace the opportunity to make a significant impact in the cybersecurity landscape and enjoy the rewards of your efforts.
