Offensive Security Manager

G-Research; Greater London; On-site; GBP 120,000 - 180,000; Full time

Benefits offered by this job

Bonus

Lunch & barista service

35 days annual leave

Pension 9%

Healthcare

Cycle-to-work

Company events

Job summary

G-Research is building an Offensive Security function from the ground up. You will lead a team of offensive security engineers and penetration testers, delivering testing across the firm's highest-priority systems, balancing recurring assessments with new service testing.

AI and automation will be central to the approach, enabling continuous, evidence-based assurance. The role is build-it, own-it, prove-it, with responsibility for defining scope, rules of engagement and maturity of the program,

Qualifications

• Hands-on offensive security and penetration testing across networks, web and APIs, cloud and infrastructure.
• Experience defining testing scope, rules of engagement and threat-led assessments.
• Experience leading or developing technical teams with coaching and performance management.

Responsibilities

• Lead a team of offensive security engineers and penetration testers.
• Own and deliver the offensive security testing programme for priority systems.
• Coordinate testing with external partners and manage intake and resourcing.
• Drive testing methodologies from scope to validation of attack paths.
• Establish continuous purple teaming with detection and response teams.
• Introduce automated assurance capabilities including breach simulation and adversary emulation.

Skills

Offensive security

Penetration testing

Networks

Web & APIs

Cloud & infrastructure

CI/CD

Kubernetes

Automation tooling

Threat-led assessments

Team leadership

Communication

Tools

Breach & attack simulation

Adversary emulation tools

Job description

We tackle the most complex problems in quantitative finance, by bringing scientific clarity to financial complexity.

From our London HQ, we unite world-class researchers and engineers in an environment that values deep exploration and methodical execution - because the best ideas take time to evolve. Together we’re building a world-class platform to amplify our teams’ most powerful ideas.

Security is foundational to this mission and must be delivered in a way that supports how our engineering teams build and operate complex systems at scale.

Take the next step in your career.

The role

We are looking for an Offensive Security Manager (Penetration Testing) to establish and grow our offensive security capability.

You will lead a team responsible for testing the firm's highest-priority systems, using hands-on offensive techniques to demonstrate whether our security controls can withstand a capable attacker.

The team is being established and expanded with a focus on hands-on penetration testing and offensive engineering. AI and automation will play a central role in closing the gaps left by point-in-time testing.

This is a build-it, own-it, prove-it role. Rather than inheriting an established programme, you will define what a mature offensive security function looks like, setting direction, raising the bar for methodology and evolving the team beyond request-driven testing toward continuous, evidence-based assurance.

Key responsibilities

Key responsibilities of the role include:

• Leading, developing and growing a team of offensive security engineers and penetration testers
• Owning and delivering the offensive security testing programme across the firm’s highest-priority systems, balancing recurring assessments with testing new and changing services
• Managing testing intake, prioritisation and resourcing, including coordinating external testing partners where required
• Driving offensive testing methodologies, from scope definition through to safe validation of real-world attack paths and control effectiveness
• Establish attack-chain validation and continuous purple teaming with detection and response teams
• Introducing automated assurance capabilities, including breach and attack simulation and adversary emulation tooling
• Overseeing physical and social engineering assessment where appropriate
• Reporting meaningful security metrics to demonstrate control effectiveness and drive continuous improvement

• Building strong working relationships across engineering, risk and incident response teams, communicating findings and influencing decisions through evidence and technical credibility

Who are we looking for?

Technical experience

• Strong hands-on experience in offensive security and penetration testing across networks, web and APIs, cloud and infrastructure
• Experience with CI/CD, Kubernetes and identity systems, with exposure to AI or agentic systems
• Experience defining testing scope, rules of engagement and threat-led, attack chain-based assessments
• Familiarity with automation, breach and attack simulation tooling or other approaches to scaling offensive testing

Leadership and delivery

• Experience leading or developing technical teams, including performance management and coaching
• Strong judgement in prioritising work, balancing risk, impact and competing demands
• Experience building teams and evolving ways of working as the function matures

Communication and influence

• Strong communication skills, with the ability to explain offensive findings and drive remediation
• Ability to influence technical decisions through credibility, evidence and collaboration

Why join us?

• Highly competitive compensation plus annual discretionary bonus
• Lunch provided via Just Eat for Business and dedicated barista bar
• 35 days’ annual leave
• 9% company pension contributions
• Informal dress code and excellent work-life balance
• Comprehensive healthcare and life assurance
• Cycle-to-work scheme
• Monthly company events