How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Company Description
ThreatSpike is the world’s first AI-managed IT and security platform, replacing traditional managed service provider models with a single fixed-price subscription. The company manages and defends entire technology estates by combining fully managed IT, comprehensive defensive security, and unlimited offensive security testing in one integrated platform. Acting as both technology vendor and service provider, ThreatSpike deploys fixes directly into the platform as issues are discovered so all customers benefit immediately without additional cost. Agentic AI underpins every layer of operations, proactively identifying issues, accelerating resolution, and continuously improving customer environments. ThreatSpike supports over 400 customers across more than 90 countries, is headquartered in the UK, and maintains ISO 27001, PCI-DSS, and CREST certifications.
Role Description
The Red Team Operator is a full-time, hybrid role based in London, focused on planning and executing offensive security assessments against client environments. In this role, the operator designs and conducts realistic adversary simulations, including penetration tests, social engineering exercises, and scenario-based red team engagements to test detection and response capabilities.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Day-to-day responsibilities include:
Get help with your application
Your very own career expert that helps elevate your application to the next level.
- Reconnaissance
- Exploitation
- Post-exploitation
- Reporting of findings
- Collaboration with defensive teams to improve client security posture
The operator documents technical details and business impact of discovered vulnerabilities, develops clear remediation guidance, and participates in debriefs with internal stakeholders and clients. The role also involves continuous skill development, staying current with emerging threats, attack techniques, and tools, and contributing to the enhancement of ThreatSpike’s AI-driven offensive security capabilities.
Qualifications
- Strong offensive security skills, including penetration testing, red teaming, threat emulation, and hands-on experience with common attack frameworks and tools (e.g., C2 frameworks, exploitation toolkits).
- Solid technical foundation in networks and systems, including TCP/IP, Windows and Linux internals, Active Directory, cloud platforms (e.g., AWS, Azure, GCP), and common enterprise security controls.
- Practical knowledge of application and infrastructure security, including web application attacks (e.g., OWASP Top 10), endpoint security evasion, lateral movement, and privilege escalation techniques.
- Experience interpreting and working with security standards and best practices (e.g., CREST-aligned methodologies, ISO 27001, PCI-DSS) and translating them into effective test plans.
- Ability to produce clear, concise, and actionable technical documentation and reports, and to communicate complex findings to both technical and non-technical audiences.
- Demonstrated capability to work collaboratively in multidisciplinary security teams, maintain high ethical standards, and operate within defined rules of engagement.
- Beneficial qualifications include industry certifications such as OSCP, OSCE, CREST CRT.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location