External Attack Surface Engineer

Cyber Search Partners Limited; Greater London; On-site; GBP 55,000 - 90,000; Full time

Job summary

Cyber Search Partners Limited is seeking an Engineer to join its growing external attack surface service. You will examine client internet footprints, validate findings, and help shape playbooks, automation and reporting.

You will work to identify legacy or third-party exposure, provide remediation guidance, and support threat hunts with CTI colleagues. Strong documentation and Linux skills are essential.

Qualifications

• Hands-on recon, OSINT and external attack surface discovery experience.
• Solid grasp of external attack techniques and initial access concepts.
• Strong networking knowledge (HTTP, DNS, TLS) and web security basics.
• Comfortable with Linux and the command line; good documentation habits.

Responsibilities

• Investigate internet-facing assets and validate flagged issues as real and exploitable.
• Define how the service runs: methodology, playbooks, automation and reporting.
• Identify unknown or unmanaged infrastructure and provide remediation guidance.
• Turn investigations into repeatable scripts, checks and processes.
• Report findings to technical teams and security leaders, remotely or in person.
• Support threat hunts and CTI colleagues with hypothesis-led work.

Skills

Recon & OSINT

Attack surface discovery

Vulnerability triage

Exposure analysis

External attack techniques

Networking fundamentals (HTTP, DNS,TLS

Linux/CLI

Documentation

Tools

Shodan

Censys

ASM tooling

Git

API work

Job description

Cyber Search Partners Limited is seeking an Engineer to join its growing external attack surface service. You will examine client internet footprints, validate findings, and help shape playbooks, automation and reporting.

You will work to identify legacy or third-party exposure, provide remediation guidance, and support threat hunts with CTI colleagues. Strong documentation and Linux skills are essential.