Company Description
DeepGuards is a UK-based cybersecurity firm specializing in penetration testing and security assessments for web applications, APIs, mobile platforms, cloud environments, and AI agents. The company is trusted by organizations pursuing SOC 2, ISO 27001, and PCI-DSS compliance, helping them identify and address security gaps. DeepGuards focuses on uncovering hidden vulnerabilities and delivering clear, actionable remediation guidance to reduce the risk of breaches. Team members work closely with clients across diverse industries, contributing to robust security postures and regulatory assurance. The culture emphasizes technical excellence, practical security outcomes, and continuous learning in a rapidly evolving threat landscape.
Role Description
As an Offensive Security Engineer at DeepGuards, you will perform penetration tests and red-team style assessments across web, API, mobile, cloud, and AI-driven systems. You will identify, validate, and document vulnerabilities, then collaborate with clients to explain impact, prioritize risks, and recommend remediation steps. Daily work includes designing test plans, simulating real-world attack scenarios, developing custom exploits where necessary, and maintaining detailed technical reports. You will stay current with emerging threats, tools, and methodologies, contribute to improving internal testing frameworks, and support compliance-focused engagements such as SOC 2, ISO 27001, and PCI-DSS. This is a full-time, on-site role based in London, involving close collaboration with other engineers and consultants.
Qualifications
- Strong foundation in Cybersecurity and Information Security, including common attack vectors, security frameworks, and risk assessment practices.
- Hands-on expertise in Application Security, such as web and API testing, secure coding principles, and vulnerability analysis for modern application stacks.
- Proficiency in Network Security, including network protocols, segmentation, intrusion techniques, and defensive controls.
- Experience in Security Engineering, with the ability to design, test, and review security controls, architectures, and tooling.
- Skilled in penetration testing methodologies and tools (e.g., Burp Suite, Nmap, Metasploit, Kali or similar toolsets), with strong report writing and documentation abilities.
- Relevant certifications are beneficial (e.g., OSCP, OSWE, CREST, CEH, GPEN) and experience with compliance frameworks such as SOC 2, ISO 27001, and PCI-DSS is a plus.
- Ability to communicate complex technical findings clearly to both technical and non-technical stakeholders, and to work collaboratively in an on-site team environment.
- Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience in offensive security roles.
#J-18808-Ljbffr
