Senior Offensive Security Engineer

Lawrence Harvey; London; Remote; GBP 90,000 - 110,000; Full time

Job summary

An innovative firm is seeking a Senior Offensive Security Engineer to lead efforts in identifying and mitigating security vulnerabilities across software products. In this dynamic role, you will collaborate closely with engineering teams to embed secure development practices throughout the software life cycle. Your expertise will drive offensive security assessments, ensuring that potential risks are addressed early in the development process. If you have a passion for security and a desire to make a significant impact in a remote work environment, this opportunity is perfect for you.

Qualifications

• 5+ years of hands-on experience in offensive security testing.
• Strong knowledge of cloud security misconfigurations and API vulnerabilities.

Responsibilities

• Conduct technical offensive security assessments to uncover vulnerabilities.
• Build and maintain automation tools for scaling offensive testing.

Skills

Offensive Security Testing

Cloud Security

Penetration Testing

Secure Development Practices

Python

Go

Java

Tools

CI/CD Pipelines

Version Control Systems

Automation Tools

Job description

Senior Offensive Security Engineer

Salary: GBP90,000 – GBP110,000 per annum
Location: UK – Remote

You'll be responsible for identifying and mitigating security vulnerabilities across software products through a combination of secure code review, penetration testing, security assessments, and the development of custom tooling.

This role involves close collaboration with engineering teams to embed secure development practices throughout the software life cycle – ensuring potential risks are addressed early in the development process.

Senior Offensive Security Engineer – Responsibilities:

• Conduct deep technical offensive security assessments against complex, distributed systems to uncover critical vulnerabilities across cloud, web applications, and internal services.
• Perform offensive testing throughout the software supply chain, including CI/CD pipelines, version control systems, and third–party integrations.
• Build and maintain automation and tooling to scale offensive testing across products and teams.
• Operate as a subject matter expert in offensive security, supporting risk–based product design decisions and architecture reviews.
• Contribute to threat modelling, red teaming strategy, and secure development practices throughout the product life cycle.

Senior Offensive Security Engineer – Requirements:

• 5+ years of hands–on experience conducting offensive security testing in production cloud environments and highly scalable architectures.
• Strong technical knowledge of authentication/authorisation mechanisms, cloud security misconfigurations, multi–tenancy isolation issues, and API–level vulnerabilities.
• Experience testing and securing the software supply chain, including common attack paths within CI/CD, source control, and package dependencies.
• Proficiency in writing offensive tools and scripts (eg, Python, Go, Java) to automate testing and exploit development.

Lawrence Harvey is acting as an Employment Business in regards to this position.