At a Glance
- Tasks: Hunt for high-value vulnerabilities and exploit complex attack chains in cloud environments.
- Company: Join a cutting-edge Offensive Security team with a focus on innovation.
- Benefits: Competitive salary, flexible work options, and opportunities for professional growth.
- Other info: Collaborate with elite practitioners in a dynamic and autonomous environment.
- Why this job: Make a real impact by discovering novel attack paths and enhancing security.
- Qualifications: Experience in Offensive Security, Red Teaming, and vulnerability research is essential.
The predicted salary is between 70000 - 90000 £ per year.
Join a cutting-edge Offensive Security team focused on uncovering high-impact vulnerabilities across modern attack surfaces. We are looking for an experienced Offensive Security Researcher / Red Team Operator who thrives in complex, real-world environments and enjoys discovering novel attack paths beyond known CVEs.
This is a highly technical opportunity for someone passionate about vulnerability research, cloud exploitation, adversary simulation, exploit development, offensive automation, and advanced tradecraft across cloud-native and internet-facing environments.
About the Role
As an Offensive Security Researcher, you will identify and weaponise real-world attack paths across Cloud, SaaS, CI/CD pipelines, modern web applications, identity systems, and internet-exposed infrastructure. You will collaborate with elite offensive practitioners to conduct deep technical research, develop new offensive methodologies, and scale successful attack techniques through automation and tooling.
This role is ideal for senior-level offensive security professionals who enjoy autonomy, creative problem solving, vulnerability discovery, exploit research, red teaming, and advanced offensive engineering.
Key Responsibilities
- Hunt for high-value vulnerabilities across cloud platforms, SaaS environments, internet-facing infrastructure, APIs, identity systems, and modern applications.
- Discover and exploit complex attack chains beyond publicly known CVEs and commodity techniques.
- Conduct advanced offensive security research into emerging attack vectors, adversary tradecraft, and exploitation methodologies.
- Perform red team operations and adversary emulation against modern enterprise environments.
- Develop offensive tooling, PoCs, exploit automation, and research frameworks using Python, Go, or similar languages.
- Automate vulnerability discovery, exploit validation, reconnaissance, and offensive workflows at scale.
- Collaborate with Offensive Engineering teams to operationalise successful techniques and improve offensive capability.
- Research cloud-native attack paths across AWS, Azure, GCP, SaaS ecosystems, CI/CD pipelines, and identity providers.
- Contribute to blogs, whitepapers, technical research, or conference talks (optional but encouraged).
Required Skills & Experience
- Proven hands-on experience in Offensive Security, Red Teaming, Vulnerability Research, or Adversary Simulation.
- Strong understanding of modern attack surfaces including cloud infrastructure, SaaS platforms, APIs, identity systems, and web applications.
- Demonstrated ability to discover high-impact vulnerabilities and complex attack paths beyond known CVEs.
- Experience exploiting cloud identities, IAM misconfigurations, CI/CD pipelines, SSO environments, or internet-exposed services.
- Strong knowledge of adversary tradecraft, post-exploitation, lateral movement, privilege escalation, and modern offensive methodologies.
- Scripting or development capability in Python, Go, or similar languages for automation, tooling, exploit development, or offensive research.
- Ability to operate autonomously in highly technical offensive environments.
- Deep technical curiosity with a research-driven attacker mindset.
Desirable / Bonus Experience
- Exploit development experience.
- Cloud exploitation and cloud-native offensive security research.
- Public vulnerability disclosures, bug bounty achievements, or original security research.
- Experience building offensive security tooling or frameworks.
- Conference presentations, technical blogs, or published research.
- Knowledge of detection evasion, offensive automation, or large-scale attack surface analysis.
Offensive Security Researcher | Red Team | Cloud & SaaS Exploitation in High Wycombe employer: Unity Systems
Join a pioneering Offensive Security team that values innovation and technical excellence, where your expertise in vulnerability research and cloud exploitation will be highly regarded. Our collaborative work culture fosters autonomy and encourages creative problem-solving, providing ample opportunities for professional growth and development in a rapidly evolving field. Located in a vibrant tech hub, we offer unique advantages such as access to cutting-edge resources and a network of elite practitioners dedicated to pushing the boundaries of offensive security.
StudySmarter Expert Advice🤫
We think this is how you could land Offensive Security Researcher | Red Team | Cloud & SaaS Exploitation in High Wycombe
✨Tip Number 1
Network like a pro! Attend industry meetups, conferences, or online webinars where you can connect with fellow offensive security enthusiasts. You never know who might have the inside scoop on job openings or be looking for someone just like you.
✨Tip Number 2
Show off your skills! Create a portfolio showcasing your projects, research, or any cool exploits you've developed. This is your chance to demonstrate your technical prowess and creativity, making you stand out in the crowd.
✨Tip Number 3
Don’t just apply anywhere; target your applications! Focus on companies that align with your interests in cloud exploitation and red teaming. Tailor your approach to highlight how your unique skills can help them tackle their specific challenges.
✨Tip Number 4
Leverage our website for job applications! We’ve got a range of opportunities waiting for talented individuals like you. Applying through us not only streamlines the process but also gives you a better chance to connect directly with hiring managers.
We think you need these skills to ace Offensive Security Researcher | Red Team | Cloud & SaaS Exploitation in High Wycombe
Some tips for your application 🫡
Tailor Your CV:Make sure your CV highlights your experience in offensive security and red teaming. We want to see how you've tackled complex attack paths and what tools you've used, so don’t hold back on the details!
Craft a Compelling Cover Letter:Your cover letter is your chance to show us your passion for vulnerability research and cloud exploitation. Share specific examples of your work and how it aligns with our mission at StudySmarter.
Show Off Your Technical Skills:We love seeing candidates who can demonstrate their technical prowess. Include any relevant projects or contributions to open-source tools that showcase your scripting skills in Python or Go.
Apply Through Our Website:To make sure your application gets the attention it deserves, apply directly through our website. It’s the best way for us to keep track of your application and get back to you quickly!
How to prepare for a job interview at Unity Systems
✨Know Your Attack Vectors
Make sure you’re well-versed in the latest attack vectors, especially those related to cloud and SaaS environments. Brush up on your knowledge of IAM misconfigurations and CI/CD pipelines, as these are hot topics in the field right now.
✨Showcase Your Research Skills
Prepare to discuss any previous vulnerability research or exploit development you've done. Bring examples of your work, whether it’s a blog post, a whitepaper, or even a GitHub repo showcasing your offensive tooling. This will demonstrate your hands-on experience and technical curiosity.
✨Practice Problem Solving
Expect to face complex scenarios during the interview. Practise articulating your thought process when tackling real-world problems. Use the STAR method (Situation, Task, Action, Result) to structure your responses and highlight your creative problem-solving skills.
✨Be Ready to Collaborate
Collaboration is key in this role, so be prepared to discuss how you’ve worked with others in past projects. Share experiences where you’ve contributed to team efforts in red teaming or offensive security, and emphasise your ability to operate autonomously while still being a team player.
