Senior Offensive Security Engineer
Job Description
[Up to c. $400k Comp Package (or equivalent) | Hybrid Working]
Role Overview
We're representing a highly established proprietary trading firm with a substantial global technology operation, supporting sophisticated trading activity across multiple financial markets. The business is investing in its offensive security capability and looking for an experienced engineer to take significant ownership of how vulnerabilities are discovered, exploited and ultimately resolved.
This is a genuinely hands-on appointment, reporting directly to the CISO. You'll operate across trading infrastructure, internal systems, applications and cloud environments, independently identifying weaknesses and demonstrating how sophisticated attackers could exploit them. Crucially, the responsibility doesn't end with reporting findings - you'll work closely with engineering and security teams to ensure vulnerabilities are addressed and fixes validated. As the first dedicated hire within this function, you'll have considerable influence over its technical direction, testing methodologies and offensive tooling. There's also potential to develop into a technical leadership position as the capability grows, making this particularly relevant to someone who enjoys both deep technical execution and building something longer term...
Role Snapshot
- Approximately 6-10+ years of substantial hands-on offensive security experience, including advanced penetration testing, red teaming and independently delivered adversary simulation engagements
- Execute complete attack scenarios across complex enterprise environments, demonstrating initial compromise, privilege escalation, lateral movement, persistence, detection evasion and controlled exfiltration
- Own vulnerability discovery and validation through to remediation, collaborating directly with infrastructure, application and security engineers to implement improvements and verify their effectiveness
- Develop and adapt bespoke offensive tools, scripts, payloads and exploits, demonstrating strong programming capability beyond standard penetration testing frameworks or AI-assisted tooling
- Apply deep technical knowledge of Windows, Linux, macOS, Active Directory, networking and cloud platforms to expose weaknesses across interconnected systems and infrastructure
- Conduct offensive assessments against internal and external networks, web applications, APIs and cloud services, identifying realistic attack paths and weaknesses in security architecture
- Design threat-informed red team and purple team exercises, leveraging MITRE ATT&CK and working with defensive teams to evaluate detection coverage, control effectiveness and incident response
- Establish and continuously improve offensive security methodologies, testing infrastructure and operational standards, with scope to influence the function's longer-term technical strategy
- Produce detailed technical findings and concise risk assessments, communicating effectively with engineers, senior leadership and security stakeholders to drive measurable improvements
- (Preferred) Experience within financial services, proprietary trading or specialist offensive security consultancies, alongside exposure to AI/LLM security, social engineering or blockchain-related vulnerabilities
...
Apply for this role
All fields marked with * are required.