Senior Offensive Security Engineer

ZipRecruiter; London; Remote; GBP 90,000 - 110,000; Full time

Job summary

A leading company is seeking a Senior Offensive Security Engineer to identify and mitigate security vulnerabilities across software products. This remote role involves collaboration with engineering teams to integrate secure development practices throughout the software life cycle. You'll conduct security assessments, perform offensive testing, and contribute to threat modeling and secure design.

Qualifications

• 5+ years of hands-on experience in offensive security testing.
• Strong technical knowledge of cloud security misconfigurations.

Responsibilities

• Conduct deep technical offensive security assessments.
• Build and maintain automation and tooling for testing.

Skills

Offensive Security Testing

Cloud Security

Authentication/Authorization

API-level Vulnerabilities

Threat Modelling

Tools

Python

Go

Java

Job description

Job Description

Senior Offensive Security Engineer

Salary: £90,000 - £110,000 per annum
Location: UK - Remote

You'll be responsible for identifying and mitigating security vulnerabilities across software products through a combination of secure code review, penetration testing, security assessments, and the development of custom tooling.

This role involves close collaboration with engineering teams to embed secure development practices throughout the software life cycle - ensuring potential risks are addressed early in the development process.

Senior Offensive Security Engineer - Responsibilities:

• Conduct deep technical offensive security assessments against complex, distributed systems to uncover critical vulnerabilities across cloud, web applications, and internal services.
• Perform offensive testing throughout the software supply chain, including CI/CD pipelines, version control systems, and third-party integrations.
• Build and maintain automation and tooling to scale offensive testing across products and teams.
• Operate as a subject matter expert in offensive security, supporting risk-based product design decisions and architecture reviews.
• Contribute to threat modelling, red teaming strategy, and secure development practices throughout the product life cycle.

Senior Offensive Security Engineer - Requirements:

• 5+ years of hands-on experience conducting offensive security testing in production cloud environments and highly scalable architectures.
• Strong technical knowledge of authentication/authorisation mechanisms, cloud security misconfigurations, multi-tenancy isolation issues, and API-level vulnerabilities.
• Experience testing and securing the software supply chain, including common attack paths within CI/CD, source control, and package dependencies.
• Proficiency in writing offensive tools and scripts (eg, Python, Go, Java) to automate testing and exploit development.

Lawrence Harvey is acting as an Employment Business in regards to this position.