At a Glance
- Tasks: Join our Red Team to enhance biometric security and tackle evolving cyber threats.
- Company: iProov, a leader in biometric identity assurance with a diverse and inclusive culture.
- Benefits: Enjoy competitive pay, flexible working, and wellness perks like private health cover and gym discounts.
- Other info: Dynamic startup environment with excellent growth opportunities and a commitment to diversity.
- Why this job: Make a real impact in cybersecurity while working with cutting-edge technology and a passionate team.
- Qualifications: 5+ years in ethical hacking or red teaming, with strong web application security skills.
The predicted salary is between 63000 - 77000 £ per year.
i Proov provides science-based biometric solutions that enable the world’s most security-conscious organizations to streamline secure remote onboarding and authentication for digital and physical access.
Our award-winning liveness technology and i SOC offer unmatched resilience against deepfakes and generative AI threats while ensuring effortless, scalable user experiences.
Trusted by leading governments and enterprises, including the U.
Department of Homeland Security, U.
Home Office, Gov Tech Singapore, ING, and UBS, i Proov sets the standard in biometric identity assurance.
This global trust is built not only on our technology but on the strength of the people behind it.
For us, diversity at i Proov is about reflecting the customers we serve, holding the principles of equality and inclusion at the heart of everything we do and all that we stand for, embracing differences, creating possibilities, and growing together.
We aim to foster a culture where individuals of all backgrounds feel confident in bringing their whole selves to work, feel included, and their talents are nurtured, empowering them to contribute fully to our purpose.
The Role
Reports to
Head of Red Team
Location
UK - Hybrid
Comp
Negotiable (Base) + Company Performance Bonus (10%) + Share Options + UK i Proov Benefits
As we continue to scale and grow, we are looking for an experienced Red Team Engineer focused on web platforms to join our growing Red Team function and ensure our system continues to deliver outstanding levels of biometric security and performance globally.
Our system has to provide the highest levels of biometric security to defend against the numerous and growing threats, whilst ensuring that we deliver outstanding performance for our millions of users worldwide.
This is an exceptionally challenging problem as the nature of the threats evolves rapidly and there is a constant and growing need to track new threats, develop new defences and deploy in a timely and efficient manner.
- How you can make an impact
- Design and execute Red Team Operations against i Proov’s biometric platform, web apps, APIs, identity flows
- Strengthen the company’s security posture through offensive security assessments including the identification and exploitation of vulnerabilities across the web platform
- Perform penetration testing and realistic security exercises to simulate various attack scenarios, to test and improve our detection and response capabilities, and to identify weaknesses in our infrastructure and products.
- Execute technical security assessments to identify risk, likelihood and impact an attacker may have on the System due to weak or missing controls
- Conduct research into real-world threat actor tactics, techniques, and procedures (TTP’s) to develop proof-of-concept tools and replicate real world attacks.
- Present findings and operational work to groups in a clear and professional manner
- Produce clear, actionable reports, risk-ranked remediation plans, and executive summaries aimed at product and engineering stakeholders.
- Collaborate with defenders, product teams, and leadership to translate findings into prioritized, actionable remediation and risk reduction.
- Bring insight into all aspects of modern security issues to our products and rapidly developing prototypes for mitigations.
- Mentor engineers in secure-by-design patterns, client-side security, and secure API design.
- Work hand-in-hand with developers to propose pragmatic mitigations, remediation plans, and detection logic for vulnerabilities discovered during engagements.
- Translate findings into engineering-friendly fix guidance (code-level suggestions, configuration changes, library upgrades, secure design alternatives) and where required create reproducible Po Cs that safely demonstrate impact.
- Validate and re-test remediations and detection improvements (verify fixes, tune rules/signatures, confirm telemetry coverage).
- Integrate offensive findings into the SDLC: enable SCA (software composition analysis), SAST/DAST pipelines, pre-merge checks, and secure CI/CD practices.
- Ensure all work follows company policies, rules of engagement (ROE), and legal/regulatory requirements.
- What we would like to see from you
- 5+ years of experience in ethical hacking, vulnerability research, exploit development, penetration testing or being a member of a red team, with significant focus on web application security.
- Strong hands-on experience attacking and defending modern web tech stacks
- Proficient with offensive web toolsets (Burp Suite, OWASP ZAP) and experienced building extensions/scripts.
- Experience with developing and maintaining web-focused tooling and automation (Burp extensions, custom scanners, authenticated API fuzzers, Graph QL mutation explorers, Puppeteer/Playwright scripts).
- Experience with source code reviewing for control flow and security flaws
- A passion for constructively break things
- Want to be part of an ambitious, high-growth startup company
- Written and verbal communication skills in English
- 25 days Annual Leave, plus 8 Bank Holidays (more holiday with service - up to an extra 5 days off per year based on your continuous service)
- Growth Shares allocated after passing probation (6 months of service)
- Salary sacrifice schemes including: Pension, Cycle To Work and Electric Car Scheme
- Nursery Sacrifice Scheme
- Work Overseas Perk - Work globally for up to 2 weeks
- Life Assurance
- Smart Health - Access to private GP, Psychologist, Nutritionist along with tailored fitness plans for both you and your family
- Award winning L&D platform with personal allocated training budgets
- Benefit from personalized 1:1 career coaching with our in-house Occupational Psychologist
- Enhanced paid family leave
- Flexible hybrid working environment
- Free Barista Coffee/Tea, biscuits with fruit in the We Work office
- Free access to We Work discounts and free online well-being sessions
- Vitality Health - a range of options available on this below
The Vitality Programme includes a number of reward benefits that all employees have access to as part of the plan, for example:
- Private Health cover including Dental, Optical, and Audiology
- 50% off monthly gym memberships
- Apple watches significantly discounted based member vitality status
- Half price trainers with Runners Need
- Weekly rewards – Free coffee with Café Nero
- Monthly rewards – Free Cinema ticket
- Discounts on travel with Expedia (hotels) and Mr & Mrs Smith with discounts getting greater throughout the year based on members vitality status
- Amazon prime free months based on activity
- Up to 25% cashback at Waitrose when buying healthy foods
- 75% off stays at Champneys Health Spas
- Allen Carr’s £299 no smoking programme for free
- Access to Vitality Healthy Mind with 30% off Headspace subscriptions and the ability to earn Vitality points for using Buddhify,
- Calm and Headspace
- Discounts on Weight Watchers
- Our Culture & Recruitment Process
At i Proov, we're incredibly proud of the culture we've carefully curated.
Our culture enables diverse thought, curiosity and innovation.
Our team strives to do everything to the highest standard possible to achieve the remarkable.
To do that we need different perspectives, experiences and ideas alongside an environment where these are welcomed - we want everyone to feel confident in bringing their full capabilities to work.
We firmly believe psychological safety is key to building and nurturing great teams.
We’re a small and dynamic company, that means having the right skills is important, and we know that our best work emerges when people feel secure, welcomed and respected.
As an equal opportunities employer, we encourage applications from people of all backgrounds.
We’re committed to building a workforce that is representative of the people we serve.
We will not put someone at a disadvantage or treat them less favourably because of age, disability, gender reassignment, marriage or civil partnership, pregnancy and maternity, race, religion or belief, sex, sexual orientation.
Our recruitment process is designed to be fair and transparent, focusing solely on your qualifications, competence, and suitability for the role.
We review all applications carefully and will be in touch with shortlisted candidates regarding the next steps in our interview process.
If you need an adjustment for a disability or any other reason during the hiring process, please send a request to careers@iproov. com.
#J-18808-Ljbffr
Red Team Engineer employer: iProov
iProov is an exceptional employer that champions diversity and inclusion, creating a supportive environment where every employee can thrive. With a hybrid work model based in the vibrant WeWork Waterloo in London, employees enjoy flexible working arrangements alongside competitive benefits, including a performance bonus and share options. The company prioritises personal growth and innovation, empowering its team to make meaningful contributions to cutting-edge biometric solutions that enhance security for clients worldwide.
StudySmarter Expert Advice🤫
We think this is how you could land Red Team Engineer
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including iProov, love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through iProov
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at iProov. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace Red Team Engineer
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at iProov insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to iProov that you’re committed to staying ahead in the game.
How to prepare for a job interview at iProov
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at iProov to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at iProov.
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.
