Senior Security Researcher

Xact Placements Limited; United Kingdom; Remote; GBP 100,000 - 125,000; Full time

Job summary

A leading cybersecurity firm in the United Kingdom is looking for an experienced offensive security professional to discover and exploit vulnerabilities. You will work collaboratively, using your deep understanding of security to protect major enterprises. Ideal candidates have 5+ years in the field and scripting abilities in Python or Go. Competitive compensation and great growth opportunities await. Don't miss this unique chance to redefine offensive security.

Benefits

Competitive compensation

Best tools & tech

Opportunities for growth

Qualifications

• 5+ years of real-world offensive security or red teaming experience.
• Ability to think like an attacker, working without fixed scopes.
• Self-driven, curious, and relentless problem solver.

Responsibilities

• Discover innovative vulnerabilities across global enterprises.
• Collaborate with offensive experts and automate discoveries.
• Research cutting-edge attack vectors across various infrastructures.

Skills

Real-world offensive security or red teaming

Deep understanding of compromising organizations

Scripting skills (Python, Go, etc.)

Ability to think like an attacker

Industry certifications (CCSAS, CCT, CRT, OSCP)

Job description

What you’ll be doing:

• Spending your days doing what you love: hacking (professionally speaking) — discovering innovative, high-impact vulnerabilities across global enterprises
• Hunting for weaknesses that matter: RCE > weak SSL ciphers
• Collaborating with other seasoned offensive experts to invent new TTPs and attack modern infrastructure
• Researching cutting-edge attack vectors across cloud, SaaS, web stacks, and internet-exposed infrastructure
• Partnering with Red Team Engineers to scale and automate your discoveries so nothing gets wasted
• (Optional but encouraged) Presenting your research at industry conferences — with full company support to make it happen

What they’re looking for:

• 5+ years of real-world offensive security or red teaming experience
• Deep understanding of how to compromise organisations without relying on public CVEs
• Ability to think like an attacker, working without fixed scopes or playbooks
• Scripting skills (Python, Go, etc.) to automate exploits, discovery, or tooling
• Industry certifications (CCSAS, CCT, CRT, OSCP, etc.) or equivalent battle scars from real-world hacking
• Self-driven, curious, and relentless — you don’t wait for permission to solve a problem

Why join?

• Competitive compensation – your skills are valued here
• Direct impact – your discoveries will protect some of the world’s largest enterprises
• The best tools & tech – you’ll be enabled to do your best work
• Huge growth – this scale-up is in hypergrowth mode, with internal promotion baked into the culture
• World-class team – collaborate with some of the sharpest offensive minds in the industry

This isn’t just another pentesting job. It’s your chance to push boundaries, break things, and redefine what’s possible in offensive security — while shaping the future of exposure management at global scale.

Interested? Let’s have a chat – roles like this don’t come around often.