Senior Security Researcher

Xact Placements; Remote; GBP 70,000 - 100,000; Full time

Job summary

A fast-scaling cybersecurity innovator is seeking an Offensive Security Researcher to discover high-impact vulnerabilities across global enterprises. This fully remote position emphasizes collaboration with seasoned experts and requires 5+ years of offensive security experience. You will research innovative attack vectors and possibly present findings at industry conferences. Ideal candidates will possess scripting skills and industry certifications, and must be curious, self-driven, and relentless in their pursuit of excellence.

Benefits

Competitive compensation

Direct impact on global enterprises

Access to the best tools and technology

Opportunities for huge growth

Collaboration with world-class offensive minds

Qualifications

• 5+ years of experience in offensive security or red teaming.
• Deep understanding of compromising organizations without public CVEs.
• Self-driven, curious, and relentless in problem-solving.

Responsibilities

• Discover high-impact vulnerabilities across global enterprises.
• Collaborate with experts to create new TTPs.
• Research cutting-edge attack vectors for various infrastructures.

Skills

Real-world offensive security or red teaming experience

Scripting skills (Python, Go)

Ability to think like an attacker

Education

Industry certifications (CCSAS, CCT, CRT, OSCP)

Job description

Offensive Security Researcher / Security Consultant | Elite Cybersecurity Scale-Up | Fully Remote (Global)

Ready to take your offensive security skills to the next level? This is your chance to join a fast-scaling cybersecurity innovator, backed by funding, recognised by Gartner, and trusted by some of the world’s biggest enterprises and critical infrastructure providers.

They’re building technology that helps security teams outrun real-world threats — and they’re looking for offensive security experts who thrive on finding vulnerabilities where others can’t.

What you’ll be doing:

• Spending your days doing what you love: hacking (professionally speaking) — discovering innovative, high-impact vulnerabilities across global enterprises
• Hunting for weaknesses that matter: RCE > weak SSL ciphers
• Collaborating with other seasoned offensive experts to invent new TTPs and attack modern infrastructure
• Researching cutting-edge attack vectors across cloud, SaaS, web stacks, and internet-exposed infrastructure
• Partnering with Red Team Engineers to scale and automate your discoveries so nothing gets wasted
• (Optional but encouraged) Presenting your research at industry conferences — with full company support to make it happen

What they’re looking for:

• 5+ years of real-world offensive security or red teaming experience
• Deep understanding of how to compromise organisations without relying on public CVEs
• Ability to think like an attacker, working without fixed scopes or playbooks
• Scripting skills (Python, Go, etc.) to automate exploits, discovery, or tooling
• Industry certifications (CCSAS, CCT, CRT, OSCP, etc.) or equivalent battle scars from real-world hacking
• Self‑driven, curious, and relentless — you don’t wait for permission to solve a problem

✅ Competitive compensation – your skills are valued here
✅ Direct impact – your discoveries will protect some of the world’s largest enterprises
✅ The best tools & tech – you’ll be enabled to do your best work
✅ Huge growth – this scale-up is in hypergrowth mode, with internal promotion baked into the culture
✅ World‑class team – collaborate with some of the sharpest offensive minds in the industry

This isn’t just another pentesting job. It’s your chance to push boundaries, break things, and redefine what’s possible in offensive security — while shaping the future of exposure management at global scale.

Interested? Let’s have a chat – roles like this don’t come around often.