Lead Offensive Security Engineer (Pen Testing)

G-Research; Greater London; On-site; GBP 120,000 - 180,000; Full time

Benefits offered by this job

Bonus

Lunch & barista service

35 days annual leave

Pension 9%

Healthcare

Cycle-to-work

Company events

Job summary

G-Research is building an Offensive Security function from the ground up. You will lead a team of offensive security engineers and penetration testers, delivering testing across the firm's highest-priority systems, balancing recurring assessments with new service testing.

AI and automation will be central to the approach, enabling continuous, evidence-based assurance. The role is build-it, own-it, prove-it, with responsibility for defining scope, rules of engagement and maturity of the program,

Qualifications

• Hands-on offensive security and penetration testing across networks, web and APIs, cloud and infrastructure.
• Experience defining testing scope, rules of engagement and threat-led assessments.
• Experience leading or developing technical teams with coaching and performance management.

Responsibilities

• Lead a team of offensive security engineers and penetration testers.
• Own and deliver the offensive security testing programme for priority systems.
• Coordinate testing with external partners and manage intake and resourcing.
• Drive testing methodologies from scope to validation of attack paths.
• Establish continuous purple teaming with detection and response teams.
• Introduce automated assurance capabilities including breach simulation and adversary emulation.

Skills

Offensive security

Penetration testing

Networks

Web & APIs

Cloud & infrastructure

CI/CD

Kubernetes

Automation tooling

Threat-led assessments

Team leadership

Communication

Tools

Breach & attack simulation

Adversary emulation tools

Job description

G-Research is building an Offensive Security function from the ground up. You will lead a team of offensive security engineers and penetration testers, delivering testing across the firm's highest-priority systems, balancing recurring assessments with new service testing.

AI and automation will be central to the approach, enabling continuous, evidence-based assurance. The role is build-it, own-it, prove-it, with responsibility for defining scope, rules of engagement and maturity of the program,