Senior Offensive Security Engineer: Red Team & Bug Bounty Expert

London Stock Exchange; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

London Stock Exchange is seeking a security professional to lead vulnerability testing, offensive testing, and remediation across the group. The role involves coordinating with 3rd party vendors to run testing programmes and to ensure efficient delivery.

The candidate will act as a domain authority on vulnerability testing, perform root-cause analysis, and contribute to scalable risk management. Collaboration with BISOs, GSOC, regulators and technology teams is essential.

Qualifications

• Background in Red Teaming, Penetration Testing or Bug Bounty advantageous.
• Technology-related degree or equivalent experience with cyber security certifications.
• Experience building AI agentic workflows or deploying and managing security tooling is advantageous.
• Knowledge of common security vulnerabilities and ATT&CK/OWASP frameworks.

Responsibilities

• Coordinate vulnerability testing programmes with internal teams and external vendors.
• Review vulnerability reports, triage by risk, and validate fixes via retesting.
• Support remediation efforts with owners and timelines, and track progress.
• Collaborate with regulators, BISOs, GSOC, and leadership on security requirements.
• Explore AI and automation to improve current and future initiatives.

Skills

Vulnerability testing

Root cause analysis

Risk management

Technical collaboration

Education

Bachelor’s Degree in Cyber Security / Technology

Tools

AI automation

Security tooling

Job description

London Stock Exchange is seeking a security professional to lead vulnerability testing, offensive testing, and remediation across the group. The role involves coordinating with 3rd party vendors to run testing programmes and to ensure efficient delivery.

The candidate will act as a domain authority on vulnerability testing, perform root-cause analysis, and contribute to scalable risk management. Collaboration with BISOs, GSOC, regulators and technology teams is essential.