At a Glance
- Tasks: Uncover high-impact vulnerabilities in cloud and SaaS environments while collaborating with elite security practitioners.
- Company: Join a cutting-edge Offensive Security team focused on real-world attack surfaces.
- Benefits: Competitive salary, flexible work options, and opportunities for professional growth.
- Other info: Ideal for tech-savvy individuals who thrive in dynamic, autonomous environments.
- Why this job: Make a real impact by discovering novel attack paths and enhancing security methodologies.
- Qualifications: Experience in offensive security, red teaming, and vulnerability research is essential.
The predicted salary is between 60000 - 80000 £ per year.
Join a cutting-edge Offensive Security team focused on uncovering high-impact vulnerabilities across modern attack surfaces. We’re looking for an experienced Offensive Security Researcher / Red Team Operator who thrives in complex, real-world environments and enjoys discovering novel attack paths beyond known CVEs.
This is a highly technical opportunity for someone passionate about vulnerability research, cloud exploitation, adversary simulation, exploit development, offensive automation, and advanced tradecraft across cloud-native and internet-facing environments.
About the Role
As an Offensive Security Researcher, you’ll identify and weaponise real-world attack paths across Cloud, SaaS, CI/CD pipelines, modern web applications, identity systems, and internet-exposed infrastructure. You’ll collaborate with elite offensive practitioners to conduct deep technical research, develop new offensive methodologies, and scale successful attack techniques through automation and tooling.
This role is ideal for senior-level offensive security professionals who enjoy autonomy, creative problem solving, vulnerability discovery, exploit research, red teaming, and advanced offensive engineering.
Key Responsibilities
- Hunt for high-value vulnerabilities across cloud platforms, SaaS environments, internet-facing infrastructure, APIs, identity systems, and modern applications.
- Discover and exploit complex attack chains beyond publicly known CVEs and commodity techniques.
- Conduct advanced offensive security research into emerging attack vectors, adversary tradecraft, and exploitation methodologies.
- Perform red team operations and adversary emulation against modern enterprise environments.
- Develop offensive tooling, PoCs, exploit automation, and research frameworks using Python, Go, or similar languages.
- Automate vulnerability discovery, exploit validation, reconnaissance, and offensive workflows at scale.
- Collaborate with Offensive Engineering teams to operationalise successful techniques and improve offensive capability.
- Research cloud-native attack paths across AWS, Azure, GCP, SaaS ecosystems, CI/CD pipelines, and identity providers.
- Contribute to blogs, whitepapers, technical research, or conference talks (optional but encouraged).
Required Skills & Experience
- Proven hands-on experience in Offensive Security, Red Teaming, Vulnerability Research, or Adversary Simulation.
- Strong understanding of modern attack surfaces including cloud infrastructure, SaaS platforms, APIs, identity systems, and web applications.
- Demonstrated ability to discover high-impact vulnerabilities and complex attack paths beyond known CVEs.
- Experience exploiting cloud identities, IAM misconfigurations, CI/CD pipelines, SSO environments, or internet-exposed services.
- Strong knowledge of adversary tradecraft, post-exploitation, lateral movement, privilege escalation, and modern offensive methodologies.
- Scripting or development capability in Python, Go, or similar languages for automation, tooling, exploit development, or offensive research.
- Ability to operate autonomously in highly technical offensive environments.
- Deep technical curiosity with a research-driven attacker mindset.
Desirable / Bonus Experience
- Exploit development experience.
- Cloud exploitation and cloud-native offensive security research.
- Public vulnerability disclosures, bug bounty achievements, or original security research.
- Experience building offensive security tooling or frameworks.
- Conference presentations, technical blogs, or published research.
- Knowledge of detection evasion, offensive automation, or large-scale attack surface analysis.
Offensive Security Researcher | Red Team | Cloud & SaaS Exploitation in Preston employer: Unity Systems
Join a pioneering Offensive Security team that values innovation and expertise, offering a dynamic work culture where autonomy and creative problem-solving are encouraged. Located in a vibrant tech hub, we provide our employees with opportunities for professional growth through collaboration with elite practitioners, access to cutting-edge tools, and the chance to contribute to impactful research. With a focus on advanced offensive methodologies and a commitment to employee development, we are an excellent employer for those passionate about pushing the boundaries of security research.
StudySmarter Expert Advice🤫
We think this is how you could land Offensive Security Researcher | Red Team | Cloud & SaaS Exploitation in Preston
✨Tip Number 1
Network like a pro! Attend industry meetups, conferences, or online webinars where you can connect with fellow offensive security enthusiasts. Don’t be shy—introduce yourself and share your passion for vulnerability research and red teaming!
✨Tip Number 2
Show off your skills! Create a portfolio showcasing your projects, research, or any bug bounties you've completed. This is your chance to demonstrate your expertise in cloud exploitation and advanced offensive methodologies.
✨Tip Number 3
Get involved in the community! Contribute to forums, write blogs, or even present at conferences. Sharing your knowledge not only helps others but also positions you as a thought leader in the offensive security space.
✨Tip Number 4
Apply through our website! We’re always on the lookout for talented individuals who are passionate about offensive security. Make sure to tailor your application to highlight your experience in discovering high-impact vulnerabilities and your scripting skills in Python or Go.
We think you need these skills to ace Offensive Security Researcher | Red Team | Cloud & SaaS Exploitation in Preston
Some tips for your application 🫡
Show Off Your Skills:When you're writing your application, make sure to highlight your hands-on experience in Offensive Security and Red Teaming. We want to see how you've tackled complex attack paths and what tools you've developed or used in your previous roles.
Be Specific About Your Experience:Don't just list your skills; give us examples! Talk about specific vulnerabilities you've discovered or exploited, especially in cloud environments or SaaS platforms. This helps us understand your depth of knowledge and practical experience.
Keep It Relevant:Tailor your application to the role. Focus on your experience with modern attack surfaces, cloud exploitation, and any scripting or development work you've done in Python or Go. This shows us that you’re not just a generalist but someone who fits right into our team.
Apply Through Our Website:We encourage you to apply directly through our website. It’s the best way for us to receive your application and ensures it gets the attention it deserves. Plus, it makes the whole process smoother for both of us!
How to prepare for a job interview at Unity Systems
✨Know Your Attack Vectors
Before the interview, brush up on the latest attack vectors and vulnerabilities in cloud environments and SaaS platforms. Be ready to discuss specific examples of how you've discovered and exploited these vulnerabilities in your past work.
✨Showcase Your Technical Skills
Prepare to demonstrate your scripting or development skills in Python or Go. You might be asked to solve a technical problem on the spot, so practice coding challenges related to exploit development or automation to showcase your abilities.
✨Discuss Your Research Mindset
Be prepared to talk about your approach to vulnerability research and how you stay updated with emerging threats. Share any personal projects or contributions to the security community, like blogs or conference talks, to highlight your passion for the field.
✨Collaborative Spirit is Key
This role involves working closely with other offensive practitioners. Be ready to discuss how you’ve collaborated on past projects, sharing insights on how teamwork has led to successful outcomes in red teaming or vulnerability discovery.
