Offensive Security Engineer

London Stock Exchange; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

London Stock Exchange is seeking a security professional to lead vulnerability testing, offensive testing, and remediation across the group. The role involves coordinating with 3rd party vendors to run testing programmes and to ensure efficient delivery.

The candidate will act as a domain authority on vulnerability testing, perform root-cause analysis, and contribute to scalable risk management. Collaboration with BISOs, GSOC, regulators and technology teams is essential.

Qualifications

• Background in Red Teaming, Penetration Testing or Bug Bounty advantageous.
• Technology-related degree or equivalent experience with cyber security certifications.
• Experience building AI agentic workflows or deploying and managing security tooling is advantageous.
• Knowledge of common security vulnerabilities and ATT&CK/OWASP frameworks.

Responsibilities

• Coordinate vulnerability testing programmes with internal teams and external vendors.
• Review vulnerability reports, triage by risk, and validate fixes via retesting.
• Support remediation efforts with owners and timelines, and track progress.
• Collaborate with regulators, BISOs, GSOC, and leadership on security requirements.
• Explore AI and automation to improve current and future initiatives.

Skills

Vulnerability testing

Root cause analysis

Risk management

Technical collaboration

Education

Bachelor’s Degree in Cyber Security / Technology

Tools

AI automation

Security tooling

Job description

• This opportunity within the Offensive Security Operations team is a crucial role for the management of vulnerability discovery, offensive testing and remediation activities across the group which protects the business from sophisticated cyber threats!
• The role holder will work with our 3rd party vendors to plan and facilitate our testing programmes ensuring they run efficiently
• Regulatory Threat Intelligence Led Pen Testing (TLTP) and Red teaming
• Bug Bounty
• Continuous External Attack Surface Management
• Active Directory security posture management
• Any programme launched in the future aimed at driving dow
• The applicant will be a domain authority on vulnerability testing, impact and remediation. They will provide insight on root cause analysis and scalable risk management. This role requires working closely within a technical team and with external teams like BISOs, GSOC and regulators
• The candidate will stay ahead of emerging cyber security thought leadership and share their ideas for areas of improvement and innovation that drive continuous cyber security risk improvement
• In this role there are opportunities to explore and experiment with how AI and other types of automation can be used to improve our existing and future initiatives
• Collaborate with external vendors, regulators and leadership teams coordinating the timely delivery of requirements
• Review vulnerability reports, validate issues reported and triage based on risk
• Support teams in understanding vulnerabilities and validate fixes through retesting
• Coordinate remediation efforts by detailing actions, owners, timelines and follow up when appropriate
• Leverage engineering skills to automate and scale security programme objectives

Background in Red Teaming / Penetration Testing / Bug Bounty advantageous!

Technology related Bachelor’s Degree or equivalent experience and certifications in cyber security

Experience building AI agentic workflows or deploying and managing security tooling is also advantageous!

Knowledge of security vulnerabilities and common software engineering flaws and Network Defence analytical models (Kill Chain, ATT&CK, OWASP top 10etc.)

Ability to work in a fast-paced environment as a problem solver and barrier breaker with initiativeUnderstanding of large scale enterprise IT system environmentsStrong verbal & written communication skills & presentation skills