Senior Security Consultant

Xact Placements Limited; United Kingdom; Remote; GBP 125,000 - 150,000; Full time

Job summary

A leading cybersecurity firm in the UK is seeking an Offensive Security Researcher to discover high-impact vulnerabilities and collaborate with experts. Ideal candidates have over 5 years of experience and strong scripting skills. This fully remote role offers competitive compensation and direct impact on securing major enterprises.

Benefits

Competitive compensation

Direct impact on security

Access to the best tools & tech

Opportunities for internal promotion

Qualifications

• 5+ years of experience in offensive security or red teaming.
• Deep understanding of compromising organizations without relying on public CVEs.
• Self-driven, curious, and relentless problem-solver.

Responsibilities

• Discovering innovative, high-impact vulnerabilities across global enterprises.
• Collaborating with experts to invent new TTPs and attack modern infrastructure.
• Researching cutting-edge attack vectors across cloud and SaaS.

Skills

Real-world offensive security or red teaming experience

Scripting skills (Python, Go, etc.)

Ability to think like an attacker

Industry certifications (CCSAS, CCT, CRT, OSCP)

Job description

Offensive Security Researcher / Security Consultant | Elite Cybersecurity Scale-Up | Fully Remote (Global)

Ready to take your offensive security skills to the next level? This is your chance to join a fast-scaling cybersecurity innovator, backed by $29M funding, recognised by Gartner, and trusted by some of the world’s biggest enterprises and critical infrastructure providers. They’re building technology that helps security teams outrun real-world threats — and they’re looking for offensive security experts who thrive on finding vulnerabilities where others can’t.

What you’ll be doing:

• Spending your days doing what you love: hacking (professionally speaking) — discovering innovative, high-impact vulnerabilities across global enterprises
• Hunting for weaknesses that matter: RCE > weak SSL ciphers
• Collaborating with other seasoned offensive experts to invent new TTPs and attack modern infrastructure
• Researching cutting-edge attack vectors across cloud, SaaS, web stacks, and internet-exposed infrastructure
• Partnering with Red Team Engineers to scale and automate your discoveries so nothing gets wasted
• (Optional but encouraged) Presenting your research at industry conferences — with full company support to make it happen

What they’re looking for:

• 5+ years of real-world offensive security or red teaming experience
• Deep understanding of how to compromise organisations without relying on public CVEs
• Ability to think like an attacker, working without fixed scopes or playbooks
• Scripting skills (Python, Go, etc.) to automate exploits, discovery, or tooling
• Industry certifications (CCSAS, CCT, CRT, OSCP, etc.) or equivalent battle scars from real-world hacking
• Self-driven, curious, and relentless — you don’t wait for permission to solve a problem

Why join?

• Competitive compensation – your skills are valued here
• Direct impact – your discoveries will protect some of the world’s largest enterprises
• The best tools & tech – you’ll be enabled to do your best work
• Huge growth – this scale-up is in hypergrowth mode, with internal promotion baked into the culture
• World-class team – collaborate with some of the sharpest offensive minds in the industry

This isn’t just another pentesting job. It’s your chance to push boundaries, break things, and redefine what’s possible in offensive security — while shaping the future of exposure management at global scale.

Interested? Let’s have a chat – roles like this don’t come around often.