Senior Security Specialist

This Security Testing Operations (STO) Senior Associate role is a crucial role for the offensive testing programme across the group, which protects the business from our most sophisticated cyber threats! The role holder will plan and complete offensive security simulations targeting assets across the enterprise as well as provide technical support for our bug bounty and perimeter asset monitoring programmes. Finally, the candidate will find opportunities for and support the development of tools or processes which drive high impact risk mitigation through automation. The applicant will be a domain authority on vulnerability exploitation. This role requires working in a tight-knit technical team, with external partners, BISOs, the GSOC, and other entities.

Role Responsibilities & Key Accountabilities:

• Plan, lead and carry out red teams / purple teams and penetration tests where you assume the role of a threat actor to meet specified objectives.
• Co-ordinate with external 3rd party vendors to enable vulnerability discovery.
• Provide constructive feedback to the team responsible for incident response and product development on their successes, failures and potential areas of improvement.
• Study and replicate tactics, techniques and procedures used by modern attackers to improve the security of our products and corporate environment.
• Efficiently report analysis and findings in the most accessible way (written reports, Jira, tickets, presentations etc).
• Develop, modify and extend tools/exploits that assist with execution of security assessments, including custom tools and automation.

Experience:

• Technology related Bachelor's Degree or equivalent experience and certifications in cyber security.
• One or more of the following security certifications OSCP, OSCE, OSEE, OSWE, CREST, GXPEN preferred.
• Demonstrable experience in Red Teaming and Penetration Testing.
• Minimum 3 years of deep, hands-on, technical security experience with at least one of: multiple security technologies such as Firewalls, IDS/IPS, Web Proxies and DLP among others, Web Applications and Services, Cryptography, Social Engineering and Open Source Intelligence Gathering (OSINT), Mobile platforms, Software Security, malware reverse engineering.
• Deep technical understanding of enterprise operating system environments, Active Directory and networking.
• Validated understanding of security vulnerabilities and common software engineering flaws.
• Familiarity with red teaming related regulations and frameworks (DORA/CBEST/TIBER) nice to have.
• Familiarity with Network Defence analytical models (Kill Chain, ATT&CK, etc.).
• Familiarity with popular scripting languages and ability to automate simple tasks.
• Experience working with Financial Services and Critical Infrastructure a plus.
• Strong verbal & written communication skills & presentation skills.
• Ability to work in a fast-paced environment.
• Problem solver and barrier breaker with initiative.

Do you have a background in penetration testing or red teaming, and are looking for your career's next step? This is a superb opportunity for you to move into a high impact role in industry!