Security Validation Expert - Breach & Attack Simulation

Deerfoot Recruitment Solutions Limited; City Of London; Hybrid; GBP 85,000 - 115,000; Full time

Job summary

Deerfoot Recruitment Solutions Limited is seeking a Cyber Security Technology SME for a leading financial services organisation in London. The role is hybrid with four days on-site per week and an initial contract to 30 April 2027.

You will work hands-on with security validation platforms (e.g., breach and attack simulation, automated pentesting) across on-prem, cloud and hybrid environments, driving risk-based remediation and retesting to prove fixes.

Qualifications

• Hands-on experience implementing and managing security validation platforms.
• Experience with automated penetration testing and breach and attack simulation.
• Understanding of offensive and defensive security, attack paths and control gaps.
• Familiarity with governance and compliance (ISO 27001, NIST).
• Experience across network, endpoint, email, web and cloud security.

Responsibilities

• Implementing, running and tuning security validation and related platforms.
• Identifying attack paths and fixing control gaps with risk-based remediation and retesting.
• Integrating security controls across enterprise platforms with telemetry and log analysis.
• Managing security tooling through its lifecycle from deployment to upgrades.
• Supporting governance and audit activities with clear evidence trails.
• Serving as SME for engineering and Business-As-Usual teams.

Skills

Security validation

Offensive security understanding

Vulnerabilities & remediation

Governance & compliance

Networking security

Tools

Picus

SafeBreach

AttackIQ

Cymulate

Pentera

XM Cyber

NodeZero

Python

Bash

PowerShell

Job description

Deerfoot Recruitment Solutions Limited is seeking a Cyber Security Technology SME for a leading financial services organisation in London. The role is hybrid with four days on-site per week and an initial contract to 30 April 2027.

You will work hands-on with security validation platforms (e.g., breach and attack simulation, automated pentesting) across on-prem, cloud and hybrid environments, driving risk-based remediation and retesting to prove fixes.