Hybrid Penetration Tester & Red Team Investigator

Optimyze Consulting; Greater London; Hybrid; GBP 60.000 - 90.000; Vollzeit

Zusammenfassung

Optimyze Consulting in London is seeking a hands-on Penetration Tester / Red Teamer to conduct security testing in customer environments, investigate vulnerabilities, and validate findings. The mid-level role is hybrid, three days in the office, working with researchers and engineers to reproduce vulnerabilities and turn findings into actionable improvements.

The role combines practical offensive security with technical investigation and product development.

Qualifikationen

• Hands-on penetration testing experience in an internal offensive-security team or substantial bug-bounty/vulnerability research.
• Strong understanding of vulnerabilities, exploitation techniques and manual testing methodologies.
• Experience testing web applications and APIs with knowledge of authentication and access-control.

Aufgaben

• Conduct penetration tests across web applications, APIs and infrastructure.
• Support red-team exercises by identifying attack paths and contributing to exploitation.
• Manually investigate and validate vulnerabilities identified by autonomous security agents.
• Develop and execute proof-of-concept exploits to demonstrate reproducibility and impact.
• Identify and investigate common security weaknesses including access-control and injection issues.
• Produce clear technical reports with findings, evidence, risk and remediation guidance.
• Develop Python scripts and tooling to support testing and improve efficiency.
• Collaborate with engineers to improve agent behaviour and testing coverage.

Kenntnisse

Penetration testing

Red teaming

Vulnerability research

Python scripting

Burp Suite

Nmap

Manual testing

Technical writing

Report writing

Cloud security testing

Tools

Burp Suite

Nmap

Metasploit

Jobbeschreibung

Optimyze Consulting in London is seeking a hands-on Penetration Tester / Red Teamer to conduct security testing in customer environments, investigate vulnerabilities, and validate findings. The mid-level role is hybrid, three days in the office, working with researchers and engineers to reproduce vulnerabilities and turn findings into actionable improvements.

The role combines practical offensive security with technical investigation and product development.