Cyber Security Technology SME - Security Validation / BAS Tooling

Deerfoot Recruitment Solutions Limited; City Of London; Hybrid; GBP 85,000 - 115,000; Full time

Job summary

Deerfoot Recruitment Solutions Limited is seeking a Cyber Security Technology SME for a leading financial services organisation in London. The role is hybrid with four days on-site per week and an initial contract to 30 April 2027.

You will work hands-on with security validation platforms (e.g., breach and attack simulation, automated pentesting) across on-prem, cloud and hybrid environments, driving risk-based remediation and retesting to prove fixes.

Qualifications

• Hands-on experience implementing and managing security validation platforms.
• Experience with automated penetration testing and breach and attack simulation.
• Understanding of offensive and defensive security, attack paths and control gaps.
• Familiarity with governance and compliance (ISO 27001, NIST).
• Experience across network, endpoint, email, web and cloud security.

Responsibilities

• Implementing, running and tuning security validation and related platforms.
• Identifying attack paths and fixing control gaps with risk-based remediation and retesting.
• Integrating security controls across enterprise platforms with telemetry and log analysis.
• Managing security tooling through its lifecycle from deployment to upgrades.
• Supporting governance and audit activities with clear evidence trails.
• Serving as SME for engineering and Business-As-Usual teams.

Skills

Security validation

Offensive security understanding

Vulnerabilities & remediation

Governance & compliance

Networking security

Tools

Picus

SafeBreach

AttackIQ

Cymulate

Pentera

XM Cyber

NodeZero

Python

Bash

PowerShell

Job description

Cyber Security Technology SME (Security Validation)

Hybrid - 4 days on-site p/w in London

Initial Contract to 30 April 2027

Inside IR35 - £544.83pd Umbrella Rate

Do you own and run security validation platforms, such as breach and attack simulation, automated penetration testing or deception, and know how to turn the findings into fixed controls?

We're recruiting a contract Cyber Security Technology SME for the IT Security team of a leading financial services organisation in London. The team runs the platforms that test and prove how well its controls work, including security validation, automated penetration testing, breach and attack simulation, threat emulation, exposure and vulnerability management and cyber deception, across on-premises, cloud and hybrid environments.

This is a hands‑on technology role. We are looking for people who have implemented and managed these platforms themselves (for example Picus, SafeBreach, AttackIQ, Cymulate, Pentera, XM Cyber or Horizon3 NodeZero), not SOC analysts or network engineers.

What You'll Be Doing

• Implementing, running and tuning security validation, automated pentest, breach and attack simulation, threat emulation and deception platforms
• Working through attack paths, vulnerabilities and control gaps, driving risk‑based remediation and retesting to prove the fix
• Integrating security controls with enterprise platforms across network, endpoint, email, web and cloud, using telemetry and log analysis to investigate and troubleshoot
• Managing security technologies through their lifecycle, from deployment and upgrades to handover and replacement
• Supporting governance, audit and compliance activity, with evidence kept accurate and easy to find
• Acting as the subject matter expert for engineering and BAU teams

What You'll Bring

• Hands‑on experience implementing and managing security validation, automated penetration testing, breach and attack simulation, threat emulation or cyber deception platforms, such as Picus, SafeBreach, AttackIQ, Cymulate, Pentera, XM Cyber or Horizon3 NodeZero
• A strong understanding of offensive and defensive security, attack paths, vulnerabilities and control gaps, including retesting and validation
• Experience across network, endpoint, email, web and cloud security, including monitoring, telemetry, log analysis and incident investigation
• Experience managing security tooling through its lifecycle and integrating it with enterprise platforms
• Experience supporting governance and compliance activity, or knowledge of frameworks such as ISO 27001 and NISTDesirable: exposure management or CTEM, MITRE ATT&CK, Python, Bash or PowerShell scripting, vulnerability management tooling, financial services experience, CISSP, OSCP, CEH

Please note: this role needs four days a week on site in London on an ongoing basis. Candidates whose experience is mainly SOC monitoring or network engineering are unlikely to be a match.

This role may suit candidates who have held roles including: Security Validation Engineer, Breach and Attack Simulation Engineer, Penetration Testing Engineer, Purple Team Engineer, Exposure Management Engineer