Senior Offensive Security Engineer (Autonomous testing)

Hollybank Trustees Ltd; City of Edinburgh; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

World-class benefits

Job summary

Quorum Cyber in Edinburgh is seeking a Senior Offensive Security Engineer (Autonomous testing) to lead and scale offensive engagements, including networks, web apps, and cloud, while developing agentic AI for autonomous testing stages.

You will drive the evolution from human-led security testing to AI-assisted workflows, and ultimately shape a multi‑tenant managed service with defined SLAs and governance.

Qualifications

• 7 years hands-on offensive security with at least 4 client-facing engagements.
• Network testing: external/internal, AD path, privilege escalation, lateral movement.
• Web/API testing focusing on OWASP Top 10 and business logic flaws.
• Red teaming: objective-based ops including initial access and C2.
• Excellent written English; report is the product.

Responsibilities

• Lead dynamic engagements across networks, web apps, APIs, cloud, and full scope red teams.
• Design end-to-end scoping, rules of engagement, authorization, execution, evidence and reporting.
• Build agentic AI capabilities to automate testing stages and improve reliability.

Skills

Offensive security depth

Red team engagements

Python

AI agent building

Leadership

Tools

LangGraph

CrewAI

OpenAI Agent SDK

PydanticAI

Job description

Senior Offensive Security Engineer (Autonomous testing)

Location: Hybrid / Redheughs Rigg, Edinburgh EH12 9DQ, UK
job type: Permanent / Full-time
Sector and subsector: IT | Cybersecurity
Salary: Negotiable salary

At Quorum Cyber, we're on a mission to help good people win.Founded in Edinburgh in 2016, we're one of the fastest growing cyber security companies in the UK and North America, serving over 400 customers on four continents.

We protect organisations against the rising threat of cyber-attacks, enabling them to thrive in an increasingly unpredictable and inhospitable digital landscape.

As a Microsoft-only security house, a Microsoft Solutions Partner for Security, a member of the Microsoft Intelligent Security Association (MISA), and winner of the Microsoft Security MSSP of the Year 2025 award, we offer a unified security ecosystem comprised of innovative services, all delivered through our customer platform, Clarity.

In September 2024, Quorum Cyber acquired Canada-based, Microsoft Solutions Partner for Security, Difenda. This was closely followed in December 2024 by the acquisition of US-based, Kivu Consulting, a global cyber security firm with world-leading incident response capabilities.

Role Purpose:

In this role you will apply your leadership, innovative thinking, curiosity, and existing deep technical expertise to help Quorum Cyber close the distance between AI speed and efficiency, and human insight. Penetration testing, API and web application testing, and red teaming are delivered the traditional way: a skilled human, a scope document, a fixed number of days, a report at the end. The work is excellent, but it does not scale. Clients want continuous assurance; not la snapshot.

This role exists to change that. You will run real engagements and, from inside that work, build the agentic AI that takes them over stage by stage: reconnaissance, enumeration, attack‑path discovery, exploitation of known vulnerability classes, evidence capture, triage, first‑draft reporting. Each stage moves from:

1. "A human does this" to…

2. "An agent does this and a human signs it off"…

3. And then to help migrate into a continuously running managed service.

What I Do Is:

Deliver engagements (Phase I, and shrinking over time)

• Lead network, web application, API, cloud, and full‑scope red team engagements.
• Own them end to end: scoping, rules of engagement, authorisation, execution, evidence, reporting, client debrief.
• Set the quality bar and be the escalation point on a hard target.

Build the automation (Phase II, growing over time)

• Build agentic systems that perform discrete stages of a test autonomously, starting narrow and expanding as reliability is proven.
• Build the evaluation harness before the agent:
• Engineer for the failure modes that matter here: false positives and negatives, non‑determinism, scope escape, destructive actions, runaway cost. Instrument accuracy, coverage, cost, and hours saved.

Turn it into a service (Phase III, growing over time)

• Work with service management and Product Management to turn working automation into a repeatable, multi‑tenant offering with defined SLAs and pricing.
• Enforce scope and authorisation in code rather than in a document: target validation, blast‑radius limits, kill switches, prohibited‑action lists, full audit trail.
• Define where the human stays in the loop, and mentor the team in both directions.

The Skills I Need Are:

Strength in all three areas. Depth in offensive security and demonstrable AI agent‑building are both non‑negotiable.

Offensive security depth

• Around 7 years hands‑on, including at least 4 delivering client‑facing engagements.
• Network testing: external and internal, Active Directory attack paths, privilege escalation, lateral movement, post‑exploitation.
• Web and API testing: the OWASP Top 10 and, more importantly, what it misses, meaning business logic flaws, authentication and session weaknesses, and multi‑step chains.
• Red teaming: objective‑based operations covering initial access, command and control, EDR evasion, and purple‑team work, against a client actively trying to catch you.
• Excellent written English, with redacted reports or a willingness to sit a writing exercise. The report is the product.

Agentic AI capability, the differentiator

• The part we care most about, and the part candidates most often overstate. We want evidence of building, not of using.
• You have shipped a non‑trivial LLM agent: something that plans, calls real tools, handles errors, and finishes a multi‑step task unsupervised. A private repository or a work project you can describe in detail counts.
• You are fluent with tool calling, structured output, the Model Context Protocol, and at least one agent framework or SDK (LangGraph, CrewAI, the OpenAI or Claude Agent SDKs, PydanticAI, or a hand‑rolled loop). We are framework‑agnostic and interested in your reasoning.
• You can describe an evaluation harness you built: the dataset, the scoring, how you caught regressions, and how you handled the fact that the same input does not give the same output twice.
• You are honest about the limits and can say with examples which parts of a test agents do well, badly, or should not attempt at all.

Software engineering and disposition

• Strong Python, the working language of this role. Go, Rust, or TypeScript is useful.
• Version control, code review, tests, CI/CD, containerisation, infrastructure as code, one major cloud. This runs unattended against client estates, so build it like production software.
• Genuine enthusiasm for automating a craft you spent years mastering, and the honesty to say when it is not good enough yet.
• Comfortable with ambiguity and with distributed, written‑first working. Much of this role is deciding what to build next.

Preferred Qualifications

• Consultancy, MSSP, or managed service experience.
• Exposure to commercial autonomous or continuous testing platforms (XBOW, Horizon3.ai NodeZero, Pentera) as a user, evaluator, or competitor.
• Open‑source contributions to offensive or agent tooling, published research, conference talks (DEF CON, Black Hat, BSides, AI Village), or a CVE record.
• Detection engineering experience, or familiarity with CREST, PCI DSS, CBEST/TIBER‑EU, or DORA threat‑led testing.

I Know I Have Done A Great Job If:

• Delivering high‑quality network, web, API, cloud and red‑team engagements that provide clear, actionable outcomes for clients.
• Building agentic systems that can safely complete defined stages of offensive testing with increasing levels of autonomy.
• Proving that the automation works through robust evaluation, testing and measurement of accuracy, coverage, reliability, cost and time saved.
• Convert successful automation into a repeatable, scalable, multi‑tenant managed service with clear service levels and commercial value.
• Creating a clear understanding of where automation can be trusted, where human expertise is required and where an agent should not be used.
• Embedding appropriate safeguards, including scope validation, authorisation controls, kill switches, prohibited‑action lists and complete audit trails.
• Raising the technical quality bar across the team and sharing your expertise in both offensive security and production‑grade software engineering.
• Ultimately, you will have helped Quorum Cyber deliver continuous assurance at a scale that traditional penetration testing alone cannot achieve.

Other Information:

You will get an excellent salary, with world class benefits.

As leading‑edge technology company you will have access to the latest technology, and an environment that will encourage and nurture your curiosity. We are passionate about your development, and you will be empowered to advance your skills and expertise.

Our Commitment to Equality & Diversity:

"Our diversity is a huge part of our success, and collecting data during the hiring process helps us understand how to keep strengthening and supporting that diversity."

We are an equal opportunity employer. We are committed to fostering an inclusive, accessible, and equitable workplace where all qualified applicants receive fair consideration. We do not discriminate on the basis of race, national or ethnic origin, colour, religion, age, sex, sexual orientation, gender identity or expression, marital status, family status, disability, or any other characteristic protected under applicable federal, provincial, or territorial human rights legislation.

The information requested below is collected to help us meet our employment equity and reporting obligations, and to support our ongoing diversity and inclusion initiatives. Providing this information is entirely voluntary. It will not be shared with hiring managers and will not be used in any hiring decision. Declining to provide this information will not affect your application in any way.