Security Solutions Engineer

Our mission is to create a generation of ethical hackers to make the world safer. We identify elite, unconventional talent, Gen Z hackers surfaced through gaming, not degrees or recruitment pipelines, and evaluate them with our proprietary signal engine, HAPTAI (Hacking Aptitude AI). The strongest operators work inside our lab, developing real attacker tradecraft against live environments, and we turn what they find into detection that keeps improving with every engagement. That combination, human tradecraft and compounding AI, makes us a trusted source of attacker behaviour intelligence for companies, critical infrastructure, and government. Cyber and national defence are converging into a single problem, and that is exactly where The Hacking Games operates.

THG is looking for a Security Solutions Engineer to help customers understand, evaluate and adopt our advanced security products and services. You will be the technical partner to our sales team: leading discovery, explaining complex capabilities, demonstrating solutions and helping customers determine what will work in their environment. A particular priority is developing deep expertise in HAPTAI and ACE, understanding the relationship between them, and explaining their individual and combined value accurately and convincingly. The role requires specialist knowledge across AI, security detection and response, offensive security and threat intelligence. You should be able to connect adversary behaviour with the practical realities of a customer’s security operation: what their controls can see, what their analysts can investigate, and how effectively they can respond. You will work closely with sales, product specialists and security practitioners, taking ownership of the technical evaluation throughout the sales cycle. You must be comfortable exploring difficult questions, demonstrating capabilities and recognising when a customer requirement calls for deeper specialist involvement.

Key Responsibilities

• Technical discovery and solution design
• Support discovery with CISOs, security architects, SOC leaders, detection engineers and offensive security teams.
• Understand the customer’s threat exposure, security architecture, operational maturity and desired outcomes.
• Explore how their technologies, telemetry, people and response processes work together, identifying gaps that THG can credibly help address.
• Translate customer needs into clear solution recommendations, technical scope and measurable evaluation criteria.
• Establish technical fit, dependencies and limitations early, giving customers and sales colleagues a realistic understanding of what is achievable.

HAPTAI and ACE expertise

• Develop detailed knowledge of HAPTAI and ACE, including their use cases, technical requirements, deployment considerations and limitations.
• Explain where each offering applies, how they relate, and when a combined approach is appropriate.
• Build customer-specific demonstrations and technical narratives that connect product capabilities with operational needs.
• Validate claims about interoperability, integrations and expected outcomes with the relevant product and delivery specialists.
• Feed customer requirements, objections and evaluation findings into product development and positioning.

Demonstrations and technical evaluations

• Work with to support your sales colleagues in the design and delivery of demonstrations, workshops and proofs of value grounded in realistic customer scenarios.
• Agree success criteria before evaluations begin, including the evidence needed to demonstrate technical and operational value.
• Explain findings clearly, distinguishing demonstrated results from assumptions and capabilities requiring further validation.
• Own technical objections and competitive discussions with accuracy, confidence and sound judgement.
• Develop reusable demonstration assets, technical explanations and reference scenarios that strengthen the sales team’s capability.

Threat-led security conversations

• Explain the distinctions and relationships between penetration testing, red teaming, purple teaming and THG’s black teaming approach.
• Discuss how Living off the Land and modern adversary tradecraft challenge detection, investigation and response.
• Connect threat intelligence and adversary techniques to relevant customer scenarios, rather than relying on generic attack demonstrations.
• Help customers understand how an assessment or simulation can generate evidence about control effectiveness and inform practical improvements.
• Work with delivery specialists to ensure proposed engagements have clear objectives, appropriate scope and achievable outcomes.

What we are looking for

Specialist knowledge and experience. We are looking for broad working knowledge across the following areas, with substantial practical depth in at least one and sufficient fluency across the others to lead credible technical discussions.

• Detection and response environments
• Understand how security operations centres (SOCs), security information and event management (SIEM), endpoint detection and response (EDR), extended detection and response (XDR), managed detection and response (MDR), and incident response (IR) fit together.
• Discuss telemetry collection, detection coverage, alert triage, investigation, threat hunting and response workflows.
• Understand the importance of endpoint, identity, cloud and network visibility, including the limitations created by missing data, configuration gaps and fragmented tooling.
• Distinguish between a control being deployed, an activity being logged, a detection firing and an effective operational response.
• Assess how a proposed solution would fit into an existing security environment and operating model.

Red teaming, black teaming and modern tradecraft

• Understand adversary emulation, threat-led testing, purple teaming and the objectives of offensive security engagements.
• Have working knowledge of Living off the Land: the abuse of legitimate tools, native functionality and trusted services to conduct malicious activity.
• Discuss contemporary tradecraft involving identity and credential abuse, privilege escalation, lateral movement, persistence, cloud environments and evasion.
• Explain why apparently legitimate activity can be difficult to distinguish from malicious behaviour, and what this means for defensive visibility and investigation.