Offensive Security Specialist

Reference:

• Role : Offensive Security Specialist
• Location : Bristol OR Belfast, 1 day per week (flexible)
• Salary : up to 60,000 basic + 10% bonus + certification sponsorship + excellent benefits

Do you want end-to-end ownership over Offensive Security for a market-leading, globally recognised and award-winning Law Firm?

This is an excellent opportunity to really own the projects you work on. We're looking for someone to proactively identify the areas they want to work on, and this firm will genuinely back you to pursue them. You'll be proactively hunting around their networks and identifying vulnerabilities, cracking passwords, testing the SOC team and building your own tooling from scratch.

What a day could look like:

• Executing penetration tests across networks, applications, infrastructure and cloud environments.
• Devising and developing the strategy and roadmap for pentests and general red team activities across the firm
• Conducting red team exercises and emulating real-world threat actor TTPs
• Developing custom scripts, tools and exploits for offensive security engagements.
• Identifying vulnerabilities across APIs, web applications, cloud platforms and enterprise systems.
• Producing technical reports and communicating findings to technical and business stakeholders.
• Collaborating with defensive teams to improve detection, response and security controls.

This is an incredible opportunity if you're looking for:

• End to end ownership over a super exciting function - your work dictates where this function is headed
• An excellent mentor and reporting line in the Head of Cyber
• Genuine flexibility - work on your own terms, just get the work done
• An amazing culture - I know multiple people in this team. They are all close and work together very well
• Investment into your development. They'll send you to conferences, speeches and sponsor any certification you're targeting

Key Requirements:

• Ideally 3+ years across Penetration Testing, Offensive Security or Red Team roles.
• A genuine passion for Offensive Security. You understand how things work, you build them - and you break them.
• A true "attackers mindset"
• Certifications like OSCP, CRTO, CRTP and any GIAC or CREST will be advantageous

I'm not looking for a long list of skills experience and projects, this isn't a massively senior role (still need hands-on experience) but I'm looking for someone that is genuinely passionate and excited by offensive security. This firm will develop, train and buy in to you - they're hiring the PERSON - is that person you?

Get in touch on for the specifics