Security Consultant Offensive Security

About the Role

As a Security Consultant – Offensive Security, you will be a core member of our penetration testing delivery team.

You will independently deliver penetration testing engagements and contribute to more advanced offensive security assignments under the guidance of our senior consultants and technical leads.

The role is highly hands-on, covering web applications, infrastructure, Active Directory, cloud, mobile and wireless environments.

You will be expected to exercise sound technical judgement, manage assigned engagements professionally and produce clear, evidence-based findings and reports for clients.

While penetration testing will be your primary focus, we are looking for someone who is technically curious and interested in developing further into Red Teaming, adversary simulation, tooling development and security research.

What You'll Do

You will deliver end-to-end penetration testing engagements, including:

• Web application penetration testing
• Internal and external network penetration testing
• Active Directory security assessments
• Cloud and hybrid environment security testing across AWS, Azure and GCP
• Mobile application penetration testing for iOS and Android
• Wi-Fi security assessments
• API and supporting application security testing

Across your engagements, you will:

• Follow established penetration testing methodologies, Rules of Engagement and defined client scope
• Identify, validate and exploit security vulnerabilities
• Perform post-exploitation, lateral movement and attack-path analysis where permitted
• Assess the practical security impact of identified vulnerabilities
• Produce high-quality technical reports with clear evidence, risk ratings and actionable remediation recommendations
• Present findings to both technical and non-technical client stakeholders
• Manage assigned engagements and deliverables against agreed timelines
• Support retesting and validation of remediated vulnerabilities
• Contribute to Red Teaming and adversary simulation engagements as your capabilities develop
• Contribute to internal tools, automation, methodologies, knowledge sharing and security research

What We're Looking ForCertifications

Required:

• Offensive Security Certified Professional (OSCP)
• CREST Registered Penetration Tester (CRT)

Additional offensive security certifications are advantageous.

Technical Foundations

You should have:

• Strong understanding of penetration testing methodologies, Rules of Engagement and ethical hacking principles
• Solid understanding of TCP/IP networking and common network protocols
• Strong working knowledge of Windows and Linux operating systems
• Good understanding of web application architecture and common vulnerability classes, including the OWASP Top 10
• Understanding of authentication, authorisation, session management and common identity-related attack paths
• Ability to assess vulnerabilities beyond automated scanner output and validate their real-world security impact

Hands-on Experience

You should have practical experience in several of the following areas:

• Web application penetration testing, including authentication, authorisation and business-logic vulnerabilities
• Network and infrastructure penetration testing
• Active Directory security assessments
• Mobile application security testing
• API security testing
• Post-exploitation and lateral movement
• Privilege escalation and attack-path analysis
• Common offensive security tooling such as Burp Suite, Nmap, BloodHound and Metasploit
• Scripting or programming using languages such as Python, PowerShell or Bash to support testing, automation and tooling

Nice to Have

Experience or exposure in any of the following would be advantageous:

• Cloud security testing across AWS, Azure or GCP
• Microsoft Entra ID, Microsoft 365, Okta or other modern identity platforms
• Red Teaming and adversary simulation
• Assumed-breach assessments
• EDR evasion or adversary tradecraft
• AI / LLM security testing
• Security tooling or exploit development
• Contributions to security research, CVEs or responsible disclosure
• Open-source security projects
• CTFs or bug bounty programmes

Professional Skills

We are looking for someone who:

• Communicates technical findings clearly in both written reports and client discussions
• Demonstrates professionalism, integrity and sound technical judgement
• Has strong attention to detail and takes ownership of work quality
• Can independently manage assigned engagements and deliver against client timelines
• Is comfortable working directly with clients
• Is willing to learn, share knowledge and contribute to the development of the wider team