Senior Offensive Security Engineer

JR United Kingdom; United Kingdom; Remote; GBP 70,000 - 90,000; Full time

Job summary

A leading company is seeking a Senior Offensive Security Engineer to identify and mitigate security vulnerabilities across software products. The role involves collaboration with engineering teams to embed secure practices and requires extensive experience in offensive security testing.

Qualifications

• 5+ years of hands-on experience in offensive security testing.
• Strong technical knowledge of authentication/authorisation mechanisms.

Responsibilities

• Conduct deep technical offensive security assessments.
• Build and maintain automation and tooling for offensive testing.

Skills

Offensive Security Testing

Cloud Security

API-level Vulnerabilities

Python

Go

Java

Job description

Social network you want to login/join with:

Senior Offensive Security Engineer, united kingdom

col-narrow-left

Client:

Lawrence Harvey

Location:

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

4

Posted:

12.05.2025

Expiry Date:

26.06.2025

col-wide

Job Description:

Senior Offensive Security Engineer

Location: UK - Remote

You’ll be responsible for identifying and mitigating security vulnerabilities across software products through a combination of secure code review, penetration testing, security assessments, and the development of custom tooling.

This role involves close collaboration with engineering teams to embed secure development practices throughout the software lifecycle – ensuring potential risks are addressed early in the development process.

Senior Offensive Security Engineer – Responsibilities:

• Conduct deep technical offensive security assessments against complex, distributed systems to uncover critical vulnerabilities across cloud, web applications, and internal services.
• Perform offensive testing throughout the software supply chain, including CI/CD pipelines, version control systems, and third-party integrations.
• Build and maintain automation and tooling to scale offensive testing across products and teams.
• Operate as a subject matter expert in offensive security, supporting risk-based product design decisions and architecture reviews.
• Contribute to threat modelling, red teaming strategy, and secure development practices throughout the product lifecycle.

Senior Offensive Security Engineer – Requirements:

• 5+ years of hands-on experience conducting offensive security testing in production cloud environments and highly scalable architectures.
• Strong technical knowledge of authentication/authorisation mechanisms, cloud security misconfigurations, multi-tenancy isolation issues, and API-level vulnerabilities.
• Experience testing and securing the software supply chain, including common attack paths within CI/CD, source control, and package dependencies.
• Proficiency in writing offensive tools and scripts (e.g., Python, Go, Java) to automate testing and exploit development.