Highly desirable

• Experience in one or more of the following:
  • Red team engagements within the financial services sector.
  • SOC, SIEM, EDR or Blue Team experience.
  • Delivery of TIBER, CBEST, CSTAR, or other regulated financial-sector red team assessments, including exposure to DORA preparation.
  • Current or previous CREST Red Team certifications (CCSAS, CCRTS or CCSAM).
  • Experience developing novel or bespoke initial access techniques.

Nice to have

• Physical security testing.
• Red team tooling, C2 infrastructure or malware development.
• Industry certifications such as OSCP, OSCE, CREST CRT, CREST CCT, Zero Point RTO, CRTO or Certified Red Team Lead (CRTL/CRTO2).
• Experience working within Operational Technology (OT) or Critical National Infrastructure (CNI) environments.

About the role

You'll be responsible for delivering a range of offensive security engagements, including:

• Red Team Operations
• Threat-Led Penetration Testing
• Adversary Emulation
• Attack Simulation

Working across the full attack lifecycle, you'll emulate real-world threat actors using modern tools, techniques and procedures (TTPs) to help clients assess their ability to prevent, detect and respond to sophisticated attacks.

This is a highly collaborative, client-facing position where you'll work alongside experienced offensive security professionals, delivering technically challenging engagements while providing meaningful security outcomes for clients.

Please note

This opportunity is aimed at experienced Red Team professionals. Applications from penetration testers looking to make their first move into red teaming are not being considered at this time.