Cyber Red Team Associate in City of Westminster

The Opportunity

As a Red Team Associate, you'll help safeguard the systems that support the UK's democratic processes. You'll think like an attacker, act like an adversary, and work proactively to uncover weaknesses before they can be exploited. Joining a high-performing Cyber Security function, you'll support the delivery of penetration testing, vulnerability management, and threat intelligence activities that directly strengthen Parliament's security posture. You'll simulate real-world threat actors, test critical security controls, and translate technical findings into meaningful improvements. Working closely with colleagues across the Cyber Security Operations Centre (CSOC), you'll bridge offensive insight with defensive action - ensuring Parliament's cyber resilience is continuously challenged, validated, and improved. If you're driven by purpose, curious by nature, and ready to sharpen your offensive skillset in a nationally significant environment, this is your opportunity to make a real impact.

Key Responsibilities:

• Learn to scope, procure, and conduct penetration tests to highlight vulnerabilities and risks within systems used at Parliament.
• Disseminate the results of these tests to service owners and key stakeholders and assist in translating their findings into action plans that strengthen security posture.
• Help assess and manage vulnerabilities present on Parliamentary systems, using tooling to perform discovery tasks to ensure wide coverage.
• Liaise with service owners to relay findings and provide guidance.
• Work with the Red Team in utilising vulnerabilities in real-life exploitation scenarios to provide risk evidence.
• Assist in the answering of Priority Intelligence Requirements.
• Use tooling to perform threat hunting, enriching our defensive capabilities with indicators of compromise and detection rules.
• Contribute to maintaining up-to-date threat profiles through research and enrich areas such as vulnerability management with relevant threat intelligence.
• Support shaping red team and tabletop exercises by tuning employed TTPs (tactics, techniques, and procedures) and learn to match those used by threat actors identified as targeting Parliament.

What You Need:

• Good knowledge of cyber security, providing advice to others.
• Understands and can apply basic principles of risk assessment, risk management processes and decision-making.
• An ability to build knowledge of Parliament's cyber security challenges, understanding the parliamentary business context.
• Utilise threat assessment principles to acquire, validate and analyse relevant threat information, enterprise attack vectors, and critical organisational functions.
• Understands the principles of penetration and vulnerability testing.
• Experience in conducting assessments and documenting findings.
• Contribute to the review and interpretation of assessment reports and help form action plans.
• Knowledge of scripting languages such as Python, PowerShell, or Bash.
• Understands basic coding techniques and how repetitive tasks could be automated via code.
• Excellent written and verbal communication skills.
• Ability to deliver complex technical information clearly and effectively to a variety of senior management and key stakeholders with different levels of expertise.
• Ability to work successfully within a team, contributing to a safe-to-fail environment, whilst upholding the values of equality, diversity and inclusion.
• The ability to pass security clearance, backed by the right to work in the UK.

About The Team

The Cyber Security team must remain switched on to geopolitical and domestic activity in order to protect its people, data, and technology. The team is responsible for operational cyber security including logging and monitoring, incident response, threat and vulnerability management, intelligence-led penetration testing, development of cyber security policies and standards, security architecture, forensic investigations, and risk management. No one day will be the same and you will be integral to the development and improvement of cyber defences within Parliament from the day you start.

About Us

UK Parliament is steeped in history and tradition. It is an important part of UK life and we need to ensure as many people as possible can engage with its work. This is why we are at the start of a huge transformation programme powered by technology. The Parliamentary Digital Service (PDS) works with the House of Commons and the House of Lords with all their IT and digital needs. We are here to realise the digital ambitions of a modern Parliament and welcome you to join us in building a digital democracy.

Our Package

In addition to your salary, we offer a range of benefits including but not limited to:

• Generous annual leave starting at 30 days and increasing to 35 days in addition to bank holidays.
• Generous maternity pay policy up to 6 months full pay.
• Enrolment in the excellent Civil Service pension scheme with an average employer contribution of 27%.
• On-site gym, nursery, catering, post office, travel office and GP.
• Flexible options including hybrid working and family friendly policies.

How To Apply

Please make sure you're clear on the requirements of the role. These can be found in the Job Description and Candidate Information Pack. You will need to upload a CV and show how you meet criterions 1, 2, 3, and 4. Our application process is anonymous, so please remove any personal information from your CV.

Apply By: Interviews: 18th + 19th March 2026 Format: Panel Interviews (On-Site)

Our Culture

For our people, we provide an amazing opportunity to bring their talents to an institution that sits right at the heart of society in the UK. We are helping to change UK Parliament and strengthen democracy. What matters here is your potential for growth and your commitment to playing your part in our ongoing success. We are passionate about providing an environment which promotes inclusion, diversity and equality. Regardless of your age, gender, ethnicity, beliefs or any of the other things that make you, you. We welcome applications from people who feel under-represented in the workforce. This includes those who may feel disadvantaged because of their socioeconomic circumstances.