Cyber Security Technology SME - Security Validation / BAS Tooling in City of London

Hybrid - 4 days on-site per week in London

Initial Contract to 30 April 2027

Inside IR35 - £544.83 per day Umbrella Rate

Do you own and run security validation platforms, such as breach and attack simulation, automated penetration testing or deception, and know how to turn the findings into fixed controls? We're recruiting a contract Cyber Security Technology SME for the IT Security team of a leading financial services organisation in London. The team runs the platforms that test and prove how well its controls work, including security validation, automated penetration testing, breach and attack simulation, threat emulation, exposure and vulnerability management and cyber deception, across on-premises, cloud and hybrid environments.

This is a hands-on technology role. We are looking for people who have implemented and managed these platforms themselves (for example Picus, SafeBreach, AttackIQ, Cymulate, Pentera, XM Cyber or Horizon3 NodeZero), not SOC analysts or network engineers.

What You'll Be Doing

• Implementing, running and tuning security validation, automated pentest, breach and attack simulation, threat emulation and deception platforms
• Working through attack paths, vulnerabilities and control gaps, driving risk-based remediation and retesting to prove the fix
• Integrating security controls with enterprise platforms across network, endpoint, email, web and cloud, using telemetry and log analysis to investigate and troubleshoot
• Managing security technologies through their lifecycle, from deployment and upgrades to handover and replacement
• Supporting governance, audit and compliance activity, with evidence kept accurate and easy to find
• Acting as the subject matter expert for engineering and BAU teams

What You'll Bring

• Hands-on experience implementing and managing security validation, automated penetration testing, breach and attack simulation, threat emulation or cyber deception platforms, such as Picus, SafeBreach, AttackIQ, Cymulate, Pentera, XM Cyber or Horizon3 NodeZero
• A strong understanding of offensive and defensive security, attack paths, vulnerabilities and control gaps, including retesting and validation
• Experience across network, endpoint, email, web and cloud security, including monitoring, telemetry, log analysis and incident investigation
• Experience managing security tooling through its lifecycle and integrating it with enterprise platforms
• Experience supporting governance and compliance activity, or knowledge of frameworks such as ISO 27001 and NIST

Desirable: exposure management or CTEM, MITRE ATT&CK, Python, Bash or PowerShell scripting, vulnerability management tooling, financial services experience, CISSP, OSCP, CEH

Please note: this role needs four days a week on site in London on an ongoing basis. Candidates whose experience is mainly SOC monitoring or network engineering are unlikely to be a match.

This role may suit candidates who have held roles including: Security Validation Engineer, Breach and Attack Simulation Engineer, Penetration Testing Engineer, Purple Team Engineer, Exposure Management Engineer.