Red Team Security Specialist

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Report directly to the Head of Information Security.

• Conduct comprehensive red team offensive penetration testing on both on-premises and cloud IT infrastructure.

• Identify vulnerabilities and offer remediation recommendations.

• Perform security assessments on cloud applications.

• Execute red team exercises that simulate real-world attack scenarios.

• Evaluate internal and external detection and response capabilities.

• Assess and test IoT devices and sensors deployed internally.

• Examine the SmartBuilding digital landscape and data lake for security.

• Assess and test web-based APIs and applications for potential vulnerabilities.

• Provide guidance on API security testing and secure practices.

• Develop testing models for Generative AI security in collaboration with broader stakeholders.

• Analyze the security testing landscape and work to minimize vulnerabilities and security incidents.

• Collaborate with cross-functional teams to improve the firm’s overall security posture.

• Prepare detailed reports and presentations tailored for both technical and non-technical stakeholders.

• Remain updated on security trends, threats, and technological advancements.

• Assist in the development and maintenance of security policies, procedures, and guidelines.

• Act as the primary point of contact for all security testing engagements.

• Enhance operational efficiencies and ensure compliance with client and external audit requirements.

• Utilize data and feedback from stakeholders to drive ongoing improvements in security testing.

• Support colleagues in becoming knowledgeable security contacts and in addressing security issues.

• Research security policies, standards, and resources to identify training and guidance requirements.

• Participate in the evaluation, selection, and implementation of security testing technologies.

• Support activities related to ISO27001, SOC2, and Cyber Essentials Plus certifications.

• Engage with industry security groups and external partners.

⛳️ Requirements

• Extensive experience and knowledge in security testing and red teaming.

• Background in information security.

• Capability to conduct a diverse range of security testing and red teaming activities.

• Ability to provide security advice and guidance to the organization.

• Experience in coordinating external security requirements.

• Skill in identifying areas for continuous improvement in security services.

• Strong background in delivering actionable results.

• Ability to quickly assimilate information to evaluate and document risks.

• Capacity to engage with individuals at different levels of seniority.

• Ability to align Information Security with business objectives and clients’ information assurance needs.

• Organized approach to managing and prioritizing multiple concurrent assignments.

• Degree-level education is likely but not mandatory.

• CREST/CHECK/OSCP/OSWE/OSWA certifications are highly advantageous.

• Various qualifications or full membership status with the IISP are highly advantageous.

• Ability to maintain positive working relationships with external clients.

• Experience in developing and utilizing structured documentation, including processes, formats, logical content, and version control.

• May be required to obtain security clearance in the future.

🏝️ Benefits

• Diverse opportunities for continuous growth and skill development.

• Formal training programs.

• Informal coaching and mentoring.

• Skills-based and technical training.

• On-the-job learning experiences.

• Wide range of financial, wellbeing, lifestyle, and family-friendly benefits.

• Hybrid working model, primarily remote with office attendance as needed for business purposes.

• Employee networks and an inclusive culture.