Offensive security jobs in NottinghamCreate job alerts

Red Team Operator - Build a World Class Capability - Fully Remote - £75,000 - £100,000 I’m partnering with a consultancy that has recently secured significant investment and is now scaling rapidly to build a genuinely world-class Red Team function. They’re looking for an experienced Red Team Operator to play a key role in that growth, working on high-impact engagements that go far beyond traditional pentesting. The role: • Deliver full-scope red team operations (external, internal, assumed breach), • Emulate real-world threat actors across technical and human vectors, • Bypass modern detection controls (EDR/SIEM) and operate with stealth, • Contribute to tooling, tradecraft, and overall capability build-out, • Produce clear, meaningful reporting for a range of stakeholders What they’re looking for: • Strong background in offensive security / Red Teaming, • Hands-on experience with C2 frameworks, lateral movement, and privilege escalation, • Solid understanding of attacker TTPs and evasion techniques, • Ability to think creatively and operate autonomously Why this role: • Be part of a rapidly growing, well-funded consultancy, • Opportunity to help shape and build a leading Red Team function, • Work on complex, high-value engagements, • Competitive package and strong career progression Package & salary: • £75,000 – £100,000 base (flexible depending on experience), • Fully Remote, • Bonus scheme typically 10-15%, • Pension + private healthcare, • Clear progression into senior / lead red team roles, • High-end tooling, budget for research, and certifications If you’d like to be part of something being built properly from the ground up, get in touch!

Cyber Security Principal Consultant\n\nAs one of the world's largest networks of audit, tax and consulting firms, RSM delivers big ideas and premium service to help middle-market businesses thrive. We are a fast-growing firm with big ambitions -- we have a clear goal to become the premium adviser to the middle market, globally. This vision touches everything we do, motivating and inspiring us to become better every day. If you are looking for a firm where you can build a future and make an impact, then RSM is the place for you.\n\nMake an Impact at RSM UK\n\nAt RSM, our consulting team brings together diverse advisory experts to deliver our six core solutions: business transformation, forensic, deal services, restructuring, finance function support, and risk and governance.\n\nOur solutions are designed to address the unique needs, challenges, and opportunities our clients face as they strive to achieve their aspirations and organisational goals. Whether it’s supporting global expansion, developing acquisition strategies, facilitating private equity investments, or collaborating with boards to manage risk and governance, our consulting experts work as one cohesive team. We prioritise simplicity, providing data-driven insights, value-added assurance, and high-quality execution to empower our clients in building sustainable, future-fit businesses.\n\nIt’s an exciting time to join our consulting team, as we embark on ambitious growth plans that promise to create diverse career opportunities. We are committed to enhancing our six solutions, expanding and developing our team of expert consultants, embracing a digital-first approach, strengthening our global presence, and building strong client relationships.\n\nAs a Principal Consultant, specialising in Cyber Security within Technology Risk Assurance, you will be responsible for assisting in managing, delivering and leading cyber engagements across a diverse portfolio of clients across the breadth of the mid-market, ensuring both excellent client service and identification of further work opportunities. The role will involve managing the delivery of agreed work activities with a primary focus on technical security including offensive security services.\n\nYou'll make an impact by:\n\n * Delivering cyber security engagements, from scoping through to delivery, debriefs and report writing.\n\n * Contributing towards the development of exciting new market facing cyber security products and services and our internal knowledge sharing hubs.\n\n * Supporting the development of other members of the team.\n\n * Representing RSM in external meetings, including attendance at client workshops, audit committees, and regional networking events.\n\n * Building trusted relationships with senior client stakeholders and identifying client and service opportunities.\n\nWhat we are looking for:\n\nAre you someone who thrives on variety, loves learning new things, and enjoys connecting with people? If you can spot inefficiencies in everyday life and are passionate about making improvements, this role is perfect for you!\n\nWe value diverse experiences and perspectives. Here’s what we’re looking for in our ideal candidate:\n\n * Experience of working in professional services firms.\n\n * Demonstrable experience of delivering and leading cyber security advisory and offensive security testing engagements.\n\n * Demonstrable experience of delivering advisory engagements relevant to security operations and defensive controls.\n\n * Understand technology trends, cyber threats, and industry issues.\n\n * Proficient in report writing.\n\n * Experience with security testing techniques such as threat modelling, reconnaissance, social engineering, enumeration, attack path mapping, exploitation, and clean up from a variety of adversarial perspectives (white/grey/black box testing).\n\n * Proficient in infrastructure and web application testing, with experience in API testing desirable.\n\n * Proficient in using common commercial and open-source penetration testing tool sets including Kali Linux, Metasploit, Nmap, BurpSuite, Nessus and other industry standard tools.\n\n * Hold an industry recognised certification (this can be at any level from Offensive Security Certified Professional (OSCP); CompTIA PenTest+; CHECK, CREST).\n\n * Motivated to lead with purpose, innovate, and make a genuine lasting impact.\n\n * Takes responsibility for work tasks and quality, managing own workload and deadlines under supervision.\n\nWhat we can offer you:\n\nWe recognise that our people are our most important assets. That’s why we offer a flexible reward and benefits package that will help you have fulfilling experience, both in and out of work.\n\n * Hybrid working.\n\n * 26 Days Holiday.\n\n * Lifestyle, Health, and Wellbeing including financial wellbeing benefits such as financial tools, electric car scheme and access to a virtual GP.\n\n * Access to a suite of 300+ courses on demand developed by our inhouse Talent Development team

Senior Cyber Operations Analyst Do you have the skills to fill this role Read the complete details below, and make your application today. £Up To £75,000 GBP Performance Bonus Hybrid WORKING Location: UK Wide , Central London, Greater London - United Kingdom Type: Permanent Senior Cyber Operations Analyst (Associate Manager) Locations: London | Manchester | Bristol Salary: Up to 75,000 + excellent package Clearance: BPSS + SC clearance (or Eligible) Are you an experienced Cyber Security Operations specialist looking to step into a senior role within a high-growth, high-impact cyber practice? We're supporting a top-tier consulting organisation (name anonymised) that is expanding its Blue Team and looking for a technical, curious and detail-driven Senior Cyber Operations Analyst to join their team. This is a fantastic opportunity to work with cutting-edge tooling, contribute to threat-driven defensive security, and shape advanced SecOps capabilities across enterprise environments. About the Role As a Senior Cyber Operations Analyst at Associate Manager level, you'll sit at the heart of a thriving Cyber Practice covering Assurance, Compliance, SecOps, Offensive Security and Research. You'll play a pivotal part in threat detection, incident response, detection engineering, and security monitoring - helping defend major UK organisations. This role is perfect for someone who thrives in technical depth, enjoys problem-solving, and wants to contribute to a mission-driven cyber defence team. Key Responsibilities You will: • Develop, maintain and enhance detection content (primarily for Splunk SIEM) across cloud, endpoint and network platforms, • Identify detection gaps, log ingestion issues and alert improvements, • Review and uplift existing SecOps standards, logging maturity, BAU monitoring and threat-led optimisation, • Perform day-to-day security monitoring, alert triage and incident response (9am-5:30pm rota), • Investigate cyber security incidents and provide technical leadership during escalations, • Mentor junior analysts through shadowing and hands-on guidance, • Act as a technical SME during client engagements, including presenting to senior stakeholders, • Participate in alert testing, IR tabletop exercises, and readiness assessments, • Stay up to date with emerging intelligence, attacker behaviours and evolving threat landscapesAdditional (client-dependent) responsibilities may include:, • Proactive threat hunting, • Incident response playbook development, • Threat intelligence research, • Vulnerability scanning & reporting, • Threat intelligence models (Pyramid of Pain, IPCE, TI lifecycle), • Detection engineering & alert development, • Scripting skills (Python, Bash, C/C++, Java), • Core cybersecurity fundamentals: network, cloud, cryptography, forensics, • Understanding of attacker techniques, APT behaviours and network protocol abuse, • Competitive salary, • Private medical insurance, • 25 days annual leave, • 3 days paid charity leave, • Continuous learning & development opportunities, • Access to a cutting-edge cyber practice and diverse project portfolio, • 5 years continuous UK residency, • No periods of 30+ consecutive days outside the UK in that time #jawa

Experian's Offensive Security team charges itself with improving the organisation's security posture through clarifying risk and verifying the efficacy of our technical, people, physical and process controls from an attacker perspective. Develop scripts, tools and methodologies to increase Offensive

A global data and technology company is seeking an experienced offensive security professional for a fully remote position. The role involves conducting various security assessments, including penetration testing and social engineering. Join the team to contribute to improving the organization’s s

We are recruiting for Cyber Security Lead for A leading manufacturing business to take ownership of its security and compliance agenda. This is a high impact, hand on role where you will shape and mature the organisation's cyber security posture, with a clear road map to achieve: Cyber Essentials → Cyber Essentials Plus → ISO 27001 You'll be the go-to expert for security, working across infrastructure, operations, and leadership to embed best practice in a live 24/7 production environment. The Role You will take ownership of cyber security across the organisation, combining hands-on technical delivery with strategic oversight. Key Responsibilities Lead delivery of Cyber Essentials, CE+ and ISO 27001 certification Assess current environment, identifying risks, vulnerabilities, and gaps Implement security improvements across infrastructure and systems Embed security into BAU IT operations and change processes Work closely with infrastructure, support, and third-party providers Deliver security awareness and upskilling across the business Engage with customers and stakeholders on security requirements Monitor and respond to the evolving threat landscape Experience This role suits someone who can operate as a security lead without the luxury of a large team. Strong cyber security background across infrastructure and systems environments Experience delivering or supporting Cyber Essentials / ISO 27001 Knowledge of: Identity & access management (Entra ID, MFA, Conditional Access) Endpoint & network security (EDR/MDR, firewalls) Vulnerability management & patching Incident response processes Ability to translate technical risk into business impact Key Traits Hands-on and pragmatic Comfortable working in a fast-paced, high-pressure environment Strong stakeholder engagement skills (technical & non-technical) Proactive mindset with a focus on continuous improvement Able to balance security vs operational realityDesirable: Exposure to offensive security / "hacker mindset" Experience in regulated sectors (manufacturing, aerospace, defence) Relevant certifications (CISSP, CISM, Microsoft Security, etc.)Why This Role? Opportunity to build and shape security from the ground up Exposure to end-to-end security ownership Hybrid WorkingAt Gleeson Recruitment Group, we embrace inclusivity and welcome applicants of all backgrounds, experiences, and abilities. We are proud to be a disability confident employer. By applying you will be registered as a candidate with Gleeson Recruitment Limited. Our Privacy Policy is available on our website and explains how we will use your data