Job Search

Red Team Operator (Cyber Resilience)

We are seeking an experienced Red Team Operator to help assess and strengthen the resilience of critical technology, systems and services. You will plan and deliver authorised adversary simulations, emulating realistic threat actors to identify weaknesses across people, processes, applications, infrastructure and physical environments.

Working collaboratively with security engineering, threat intelligence, incident response and technology teams, you will develop threat-informed scenarios based on current tactics, techniques and procedures. Your responsibilities will include reconnaissance, vulnerability validation, social engineering, exploitation, privilege escalation, lateral movement, command and control, and the safe assessment of detection and response capabilities. Activities must be carefully scoped, documented and conducted in line with agreed rules of engagement.

You will produce clear, evidence-based reports that explain technical findings, business impact and realistic remediation options. You will also brief stakeholders at varied levels of technical understanding, support purple-team exercises, and help validate improvements through targeted retesting. A strong focus on operational safety, data protection and minimising disruption is essential.

Applicants should have demonstrable experience in red teaming, penetration testing or adversary emulation, with a sound understanding of cyber resilience and attack lifecycle methodologies. Practical knowledge of enterprise networks, cloud environments, identity and access management, operating systems, web applications and common security controls is required. Familiarity with frameworks such as MITRE ATT&CK, CREST or equivalent standards would be advantageous.

You should be comfortable scripting or automating tasks using languages such as Python, PowerShell or Bash, and capable of adapting your approach as assessments develop. Relevant professional certifications, such as CREST, OSCP, OSEP, CRTO or equivalent experience, are desirable. We value curiosity, sound judgement, excellent written and verbal communication, and the ability to work discreetly and constructively in a highly collaborative environment.

We are seeking a Red Team Operator (Cyber Resilience) to help assess and strengthen the resilience of critical systems, services and people against realistic cyber threats. You will plan and deliver authorised red team and threat emulation exercises, working across infrastructure, cloud, applications, identities, networks and physical environments where appropriate. Your work will support the identification of weaknesses that could affect confidentiality, integrity, availability and operational continuity.

Responsibilities will include developing exercise plans and rules of engagement; conducting reconnaissance, initial access, privilege escalation, lateral movement, persistence and exfiltration simulations; and safely testing detection, response and recovery capabilities. You will use a blend of commercial tools, open-source frameworks and bespoke techniques, while maintaining strict control of scope, evidence and operational risk. You will also collaborate with blue teams and security operations functions to validate alerts, defensive controls, incident response procedures and recovery arrangements.

You will document technical findings and business impact clearly, producing reports that include practical remediation recommendations and prioritised improvements. You will brief technical and non-technical stakeholders, contribute to lessons-learned sessions and help track actions through to completion. The role may also involve supporting vulnerability assessments, purple team activities, tabletop exercises, security architecture reviews and the development of repeatable testing methodologies.

Applicants should have proven experience in red teaming, penetration testing, adversary simulation or a closely related cyber security discipline, together with a strong understanding of common attack paths, the MITRE ATT&CK framework and modern defensive technologies. Practical experience with Windows and Linux environments, Active Directory, cloud platforms, scripting and network protocols is expected. Relevant qualifications such as CREST, OSCP, OSEP, CRTO or equivalent experience are desirable. You must demonstrate sound judgement, excellent written and verbal communication skills, a methodical approach to evidence handling and a commitment to responsible, lawful and ethical security testing.

As a Red Team Operator (Cyber Resilience), you will help assess and strengthen the organisation’s ability to prevent, detect, respond to and recover from sophisticated cyber threats. Working as part of a collaborative security function, you will plan and deliver authorised adversary simulation exercises that test people, processes and technology across a range of scenarios.

Your responsibilities will include developing realistic attack plans based on current threat intelligence, conducting red team and purple team activities, and emulating the tactics, techniques and procedures used by relevant threat actors. You will assess controls across networks, cloud environments, applications, endpoints, identity services and operational processes, while maintaining strict adherence to agreed rules of engagement and legal requirements.

You will work closely with security operations, infrastructure, engineering, risk and business stakeholders to validate detection and response capabilities. This will involve documenting findings, evidencing attack paths, assessing business impact and producing clear reports for both technical and senior audiences. You will also support post-exercise reviews, recommend practical improvements and help track remediation through to completion. Where appropriate, you will contribute to incident response exercises, crisis simulations and wider cyber-resilience testing.

Applicants should have practical experience in red teaming, penetration testing, adversary simulation, security testing or incident response, with a strong understanding of common attack methodologies and defensive controls. Experience with scripting or programming languages such as Python, PowerShell or Bash, together with familiarity with cloud platforms, Active Directory, networking and security tooling, is desirable. Relevant professional certifications are welcome, but demonstrable capability and sound judgement are equally important.

You will need excellent communication skills, a methodical approach and the ability to operate discreetly in complex environments. The successful candidate will be curious, adaptable and comfortable challenging assumptions while building constructive relationships. A strong commitment to ethical conduct, confidentiality, continuous learning and responsible vulnerability handling is essential.

We are seeking a Red Team Operator (Cyber Resilience) to challenge and strengthen the organisation’s ability to prevent, detect, respond to and recover from sophisticated cyber attacks. You will plan and deliver authorised red team, adversary simulation and purple team engagements across people, processes, applications, infrastructure and cloud environments.

Working with security operations, technology, risk and resilience teams, you will emulate realistic threat actors using intelligence-led techniques. Your responsibilities will include defining engagement objectives and rules of engagement, developing attack scenarios, conducting reconnaissance, identifying and exploiting weaknesses, and safely demonstrating potential business impact. You will maintain a strong focus on controlled execution, clear communication and protection of operational services.

You will document activity accurately, preserve appropriate evidence and produce high-quality reports for both technical and senior stakeholders. This will include explaining attack paths, assessing the effectiveness of preventative and detective controls, identifying gaps in cyber resilience, and providing practical, prioritised recommendations. You will also support purple team exercises, replay attack techniques with defenders, validate remediation and track improvements through to completion.

The successful candidate will have demonstrable experience in red teaming, penetration testing, adversary simulation or a closely related security role. You should be confident working across networks, endpoints, identity platforms, web applications and cloud technologies, with practical knowledge of common attack frameworks such as MITRE ATT&CK. Experience with scripting or programming, security tooling, operational technology or incident response would be advantageous.

You will need strong analytical and problem-solving skills, sound judgement and a responsible approach to handling sensitive information. The ability to explain complex technical findings clearly, collaborate with varied stakeholders and operate effectively within defined legal, ethical and safety boundaries is essential. Relevant professional certifications or equivalent practical experience are welcomed. This role may involve occasional travel, out-of-hours exercises and participation in resilience or incident response activities.

An opportunity is available for an experienced iOS Vulnerability Researcher to investigate the security of Apple platforms, applications and supporting technologies. Working remotely, you will identify, analyse and responsibly disclose vulnerabilities across iOS and related components, helping to improve the resilience of mobile devices and services.

Your responsibilities will include conducting vulnerability research against iOS, iPadOS and associated frameworks; developing proof-of-concept exploits and security tests; analysing operating system internals, application behaviour and mitigations; and using static and dynamic analysis to investigate complex security issues. You will also perform reverse engineering, examine crash logs and binaries, and create reliable tooling to support research and automation.

You will document technical findings clearly, including attack scenarios, impact assessments, reproduction steps and recommended remediation. The role involves collaborating with other security researchers and engineering specialists, presenting discoveries to technical audiences, and staying informed about new Apple security mechanisms, exploit techniques and developments within the wider vulnerability research community.

Applicants should have substantial experience in vulnerability research, reverse engineering or mobile application security, with a strong understanding of iOS internals, Objective-C and Swift. Proficiency in C or C++, Python and scripting for research automation is expected. Experience with debugging and analysis tools such as LLDB, Frida, Hopper, IDA Pro or Ghidra would be highly advantageous.

A solid knowledge of memory corruption, code execution, sandboxing, privilege escalation, cryptographic implementation and common mitigation technologies is essential. Experience researching kernel components, WebKit, drivers, inter-process communication or secure boot mechanisms would be valuable. You should be self-motivated, methodical and comfortable working independently in a remote environment, while communicating complex technical concepts with clarity. A responsible approach to vulnerability disclosure and a commitment to ethical security research are required.

We are seeking an experienced Senior Penetration Tester to assess the security of complex systems, applications and infrastructure across a varied client portfolio. You will plan and deliver penetration tests, identify vulnerabilities and provide clear, practical guidance to help organisations strengthen their security posture.

Responsibilities will include conducting web application, mobile application, API, network, cloud and infrastructure assessments using a combination of manual techniques and industry-standard tools. You will scope engagements, develop test plans, perform technical assessments, validate findings and produce high-quality reports that clearly explain business impact and remediation priorities. You will also present results to technical and non-technical stakeholders, supporting them in understanding and addressing identified risks.

As a senior member of the team, you will contribute to test methodology development, quality assurance and the continual improvement of internal processes. You may also provide technical mentoring to less experienced testers, support client meetings and assist with proposals, estimates and security consultancy activities where appropriate. The role will require you to remain current with emerging threats, attack techniques, security standards and relevant regulatory requirements.

Applicants should have substantial professional experience in penetration testing, vulnerability assessment or an equivalent offensive security role. Strong practical knowledge of common web vulnerabilities, authentication and authorisation weaknesses, network protocols, operating systems, scripting and cloud environments is essential. Experience with tools such as Burp Suite, Nmap, Metasploit and relevant cloud security tooling would be advantageous.

You should be able to demonstrate excellent analytical, report-writing and communication skills, with the ability to explain complex technical issues clearly. Industry-recognised certifications such as CREST, OSCP, OSWE, GXPN or equivalent qualifications are desirable. A methodical approach, sound judgement, curiosity and a strong commitment to ethical conduct are essential. This position may involve occasional travel and flexibility to support client engagements and project deadlines.

We are seeking a Cyber Security Consultant / Penetration Tester to assess, challenge and strengthen the security of systems, applications, networks and infrastructure. This role will suit an experienced security professional who can combine strong technical capability with the confidence to communicate findings clearly to both technical and non-technical audiences.

You will plan and deliver penetration tests, vulnerability assessments and security reviews across web applications, mobile applications, APIs, internal and external networks, cloud environments and wireless infrastructure. Responsibilities will include defining testing scope, identifying vulnerabilities, validating exploitability, assessing business impact and producing accurate, evidence-based reports. You will also provide practical remediation advice and support stakeholders in understanding and reducing security risk.

The successful candidate will contribute to client engagements from initial scoping through to final presentation, ensuring work is delivered to a high professional standard and within agreed timescales. You may also be involved in threat modelling, security consultancy, incident support, technical workshops and the development of testing methodologies, tools and processes. A commitment to maintaining current knowledge of emerging threats, attack techniques and defensive controls is essential.

Applicants should have demonstrable experience in penetration testing or cyber security consultancy, with a sound understanding of common vulnerabilities and exploitation techniques. Practical experience with tools such as Burp Suite, Nmap, Metasploit and vulnerability scanners is expected, alongside the ability to perform manual testing rather than relying solely on automated results. Knowledge of OWASP methodologies, network protocols, authentication mechanisms, cloud security and secure development principles would be advantageous.

Relevant professional certifications, such as CREST, OSCP, CRT, CSTM or equivalent, are desirable. You should possess excellent written and verbal communication skills, strong analytical ability and a methodical approach to documenting technical findings. The role may involve occasional travel and requires a high level of integrity, discretion and professionalism when handling sensitive information.

We are seeking a Cyber Essentials Plus Assessor and Penetration Tester to join a specialist cybersecurity team supporting organisations across the UK. This is a remote role with occasional onsite client work, so candidates must be comfortable working independently while building trusted relationships with technical and non-technical stakeholders.

You will deliver Cyber Essentials Plus assessments from planning through to final reporting, reviewing client environments against the scheme requirements and identifying areas requiring remediation. Your responsibilities will include scoping engagements, conducting technical verification activities, assessing devices, user accounts, software, firewalls and security configurations, gathering and evidencing findings, and communicating clear, practical recommendations. You will also support clients with queries throughout the assessment process and maintain accurate, audit-ready records.

Alongside certification assessments, you will plan and carry out penetration tests across external and internal infrastructure, web applications, APIs, cloud environments and, where appropriate, wireless networks. You will identify, validate and risk-rate vulnerabilities, minimise operational impact during testing, and produce high-quality reports that explain technical issues and business risk in an accessible manner. You may also present findings to clients and contribute to follow-up discussions, retesting and continuous improvement of internal methodologies.

Applicants should have demonstrable experience delivering Cyber Essentials Plus assessments and conducting penetration testing in a professional environment. Relevant industry certifications, such as CREST, CHECK, OSCP, OSCP+, CRT, CSTM or equivalent, would be advantageous. Strong knowledge of networking, operating systems, identity and access management, vulnerability assessment, secure configuration and common attack techniques is essential. Experience with recognised testing tools and the ability to write concise, evidence-based reports are also required.

You will need excellent communication skills, sound professional judgement and a methodical approach to managing multiple engagements. A valid UK driving licence and willingness to travel occasionally to client sites are desirable. In return, you will receive opportunities for technical development, varied client work, flexible remote working and the chance to help organisations strengthen their cyber resilience.

We are seeking an experienced Penetration Tester to assess the security of applications, infrastructure, networks and cloud environments. You will identify vulnerabilities, validate their potential impact and provide clear, practical recommendations to support effective remediation. This role will involve working with technical and non-technical stakeholders, helping to strengthen security controls and reduce organisational risk.

Your responsibilities will include planning and delivering penetration tests across web applications, APIs, mobile applications, internal and external networks, wireless environments and cloud platforms. You will conduct reconnaissance, vulnerability analysis and exploitation activities using both established methodologies and creative testing techniques. You will also review source code, configurations and security architecture where required, documenting evidence in a clear and reproducible manner.

You will produce high-quality reports that explain technical findings, business impact, risk ratings and recommended remediation actions. You will present results to a range of audiences, support follow-up discussions and assist with retesting to confirm that identified weaknesses have been addressed. The role may also involve contributing to threat modelling, security reviews, red team exercises, security awareness initiatives and the continual improvement of testing processes.

Applicants should have demonstrable commercial experience in penetration testing, vulnerability assessment or an equivalent cyber security role. Strong knowledge of common web and application vulnerabilities, networking principles, operating systems, authentication mechanisms and cloud security is essential. Experience with tools such as Burp Suite, Nmap, Metasploit, Wireshark and commercial scanning platforms would be advantageous, alongside the ability to develop scripts or tooling in Python, PowerShell or a similar language.

Relevant professional qualifications, such as CREST, OSCP, OSWE, CHECK or equivalent certifications, are desirable. You should be an analytical and ethical security professional with excellent written and verbal communication skills, strong attention to detail and the confidence to work independently or collaboratively. A commitment to responsible disclosure, continual learning and maintaining high professional standards is essential.

We are seeking a Senior Cyber Security Test Researcher to lead the research, design and delivery of advanced security testing activities across complex systems, applications and infrastructure. You will investigate emerging threats, develop realistic attack scenarios and assess how effectively defensive controls identify, contain and respond to malicious activity. Working across multidisciplinary teams, you will turn technical findings into clear, actionable recommendations that strengthen resilience and support informed security decisions.

Your responsibilities will include planning and conducting penetration tests, red-team exercises, vulnerability assessments and threat-led security evaluations. You will research new attack techniques, tools and vulnerabilities, creating proof-of-concept exploits or test methods where appropriate. You will analyse test results, validate weaknesses, document evidence and produce high-quality technical reports for both specialist and non-specialist audiences. You will also contribute to security testing methodologies, improve repeatable processes, mentor less experienced colleagues and present findings to senior stakeholders. The role may involve collaborating with developers, engineers, incident responders and risk professionals to track remediation and confirm that identified issues have been effectively addressed.

Applicants should have substantial experience in cyber security testing, offensive security research or a closely related discipline, with a strong understanding of networks, operating systems, cloud environments, web applications and common security protocols. Practical experience using penetration-testing and vulnerability-assessment tools is essential, alongside the ability to script or develop in languages such as Python, PowerShell, Bash or similar. You should be comfortable researching unfamiliar technologies, questioning assumptions and working independently on complex technical problems. Relevant professional certifications, such as OSCP, CREST, GIAC or equivalent experience, would be advantageous. Strong written and verbal communication skills, sound judgement and a methodical approach to managing sensitive information are also required.