Senior Security Consultant

Xact Placements Limited; City Of London; Remote; GBP 70,000 - 90,000; Full time

Job summary

A fast-scaling cybersecurity innovator in the UK is looking for an Offensive Security Researcher/Security Consultant. The ideal candidate will have over 5 years of experience in offensive security, with a passion for discovering vulnerabilities. This role offers competitive compensation and the opportunity to make a direct impact in protecting large enterprises. Join a world-class team and shape the future of exposure management at scale.

Benefits

Competitive compensation

Best tools & tech

Huge growth opportunities

World-class team collaboration

Opportunity to present research at conferences

Qualifications

• 5+ years of real-world offensive security or red teaming experience.
• Deep understanding of how to compromise organizations without relying on public CVEs.
• Ability to think like an attacker, working without fixed scopes or playbooks.

Responsibilities

• Discover innovative vulnerabilities across global enterprises.
• Hunt for significant weaknesses like RCE & weak SSL ciphers.
• Collaborate with experts to develop new attack methods.
• Research attack vectors across various infrastructures.

Skills

Real-world offensive security or red teaming experience

Scripting skills (Python, Go, etc.)

Deep understanding of security vulnerabilities

Critical thinking like an attacker

Self-driven and curious mindset

Education

Industry certifications (CCSAS, CCT, CRT, OSCP, etc.)

Job description

Overview

Offensive Security Researcher / Security Consultant Elite Cybersecurity Scale-Up Fully Remote (Global)

Ready to take your offensive security skills to the next level? This is your chance to join a fast-scaling cybersecurity innovator, backed by funding, recognised by Gartner, and trusted by some of the world's biggest enterprises and critical infrastructure providers.

They're building technology that helps security teams outrun real-world threats - and they're looking for offensive security experts who thrive on finding vulnerabilities where others can't.

What you'll be doing

• Spending your days doing what you love: hacking (professionally speaking) - discovering innovative, high-impact vulnerabilities across global enterprises
• Hunting for weaknesses that matter: RCE > weak SSL ciphers
• Collaborating with other seasoned offensive experts to invent new TTPs and attack modern infrastructure
• Researching cutting-edge attack vectors across cloud, SaaS, web stacks, and internet-exposed infrastructure
• Partnering with Red Team Engineers to scale and automate your discoveries so nothing gets wasted
• (Optional but encouraged) Presenting your research at industry conferences - with full company support to make it happen

What they're looking for

• 5+ years of real-world offensive security or red teaming experience
• Deep understanding of how to compromise organisations without relying on public CVEs
• Ability to think like an attacker, working without fixed scopes or playbooks
• Scripting skills (Python, Go, etc.) to automate exploits, discovery, or tooling
• Industry certifications (CCSAS, CCT, CRT, OSCP, etc.) or equivalent battle scars from real-world hacking
• Self-driven, curious, and relentless - you don't wait for permission to solve a problem

Why join?

• Competitive compensation - your skills are valued here
• Direct impact - your discoveries will protect some of the world's largest enterprises
• The best tools & tech - you'll be enabled to do your best work
• Huge growth - this scale-up is in hypergrowth mode, with internal promotion baked into the culture
• World-class team - collaborate with some of the sharpest offensive minds in the industry
• This isn't just another pentesting job. It's your chance to push boundaries, break things, and redefine what's possible in offensive security - while shaping the future of exposure management at global scale.

Interested? Let's have a chat - roles like this don't come around often.