Senior Red Teamer

Tesco UK; Welwyn Garden City; On-site; GBP 40,000 - 70,000; Full time

Job summary

Tesco UK seeks a skilled red teamer to enhance their security testing capabilities. In this role, you'll identify security weaknesses, mentor team members, and help develop a mature blue team capability. Join us to contribute to a workplace that values inclusivity and collaboration while protecting our customers and colleagues.

Qualifications

• Experience in performing red team engagements and identifying security weaknesses.
• Familiarity with frameworks like TIBER-EU or MITRE ATT&CK.
• Good communication, both written and oral, and ability to work collaboratively.

Responsibilities

• Support wider security capability with a red team perspective.
• Lead and mentor team members for high performance.
• Validate findings from the bug bounty program.

Skills

Analytical thinking

Critical thinking

Communication skills

Education

Certifications like CRTO

Tools

C2 frameworks

EDR

Firewalls

IDS

IPS

Anti-virus

Job description

We are passionate about step changing our cyber security capability to better protect customers and colleagues across our global business.

As part of this, we’re growing our security testing function to enhance and mature our defensive security capabilities.

This new role is an ideal opportunity for a red teamer eager to help build a red team capability that complements our team of penetration testers. As we shift towards a more threat-led security testing approach, we want to ensure we regularly test ourselves against potential threats.

We encourage positive engagement with our detection and response teams to push the boundaries of our security efforts at Tesco. You will have the opportunity to support and develop a mature blue team capability further.

You will also collaborate with application and infrastructure teams to address any underlying issues you identify.

You will work within an offensively trained, defensively focused security team. Your primary responsibility will be to help mature our security testing team to include a threat-led testing capability.

In this role, you will work alongside other testers and leverage internal knowledge, data sources, and tools to identify attack vectors and test hypotheses, unlike typical consultancy roles.

Opportunities to further develop your skills include:

• Supporting our wider security capability by providing a red team perspective to pentesting, detection, and prevention engineering
• Leading, mentoring, and developing team members to drive high performance
• Validating findings from our bug bounty program
• Triage and validate Tesco’s risk posture for newly released CVEs as part of vulnerability management

You will be supported in your career growth and encouraged to undertake personal research and certifications to stay at the forefront of offensive security.

Requirements include:

• Experience leading or performing red team engagements in a corporate environment, identifying exploitable security weaknesses
• Familiarity with frameworks like TIBER-EU or MITRE ATT&CK
• Experience with at least one C2 framework (e.g., Cobalt Strike, Mythic, Havoc)
• Experience building or managing C2 infrastructure
• Certifications like CRTO are desirable but not essential
• Knowledge of preventative and detective controls (EDR, firewalls, IDS, IPS, anti-virus, etc.)
• Analytical and critical thinking skills, with a willingness to challenge the status quo
• Good communication skills, both written and oral
• Ability to work independently and collaboratively within a diverse team

Our vision at Tesco is to become every customer's favorite way to shop, whether at home or on the go. Our core purpose is to serve our customers, communities, and the planet better every day. We aim to act as a responsible and sustainable business for all stakeholders and the communities we serve.

We foster an inclusive culture where everyone can be themselves. We celebrate diversity and value the opportunities it brings. Tesco is a Disability Confident Leader and committed to an accessible recruitment process. For accessibility support, please click here.

We offer various full-time and part-time working patterns across our business areas, combining office and remote work. Our offices are spaces for connection, collaboration, and innovation. Internal applicants should discuss flexible arrangements with their Hiring Manager. Everyone is welcome at Tesco.