Senior Offensive Security Engineer

Salary: £55,000 - 95,000 per year

Requirements

• Background in offensive security and adversary simulation.
• Detailed knowledge of global cyber threats and procedures used by cyber adversaries.
• Two or more of the following skills:
• - Network penetration testing and manipulation of network infrastructure.
• - Web application penetration testing assessments.
• - Email, phone, or physical social-engineering assessments.
• - Development, extension, or modifying of exploits, shellcode or exploit tools.
• - Covert physical intrusion.
• - Cloud security or penetration testing (any major provider).
• - AI Red Teaming/Testing and usage of Agentic AI for automation.
• Industry certifications such as OSCP, OSCE, OSWE, GPEN, GCIH, GWAPT, or GXPN or equivalent experience.
• Proficient in attacker tooling, including post-exploitation frameworks and tooling.
• Proficient in programming languages (C, C++, C#, Python, PowerShell, Bash, or Ruby).
• Proficient in Social Engineering techniques across OSINT, phishing, vishing and impersonation.
• Knowledge of current cloud attack methodologies and mitigations.
• Experience of Windows Operating System architecture and internals in an enterprise environment.
• Strong understanding of core IT concepts including TCP/IP networking, Windows & Active Directory, Unix/Linux, Mainframe, Cloud Service Providers, Relational Databases, Data Warehouses, and filesystems.
• Knowledge of IT technologies and methods to secure them, including databases, SharePoint, storage area networks, and cloud-based storage.

Responsibilities

• Collaborate with other teams within the Cyber Fusion Centre and the wider organization to articulate Cyber Risks in a threat-informed manner.
• Support Offensive Securitys engagement at multiple organizational levels, from senior leaders to technical analysts.
• Participate in performing physical exploitation, network exploitation, and social engineering assessments against authorized targets.
• Use CyberThreat Intelligence and previous Adversary Simulation findings to develop test cases demonstrating TTP effectiveness against Experians control environment.
• Research and stay updated with the latest cyber threats, attack vectors, and attacker methodologies.
• Develop scripts, tools, and methodologies to enhance Offensive Securitys capabilities and educate team members around automation and AI.
• Use MITRE ATT&CK Framework and other structured attack analysis tools to describe and classify attacker methodology and significance.

Technologies

• AI
• Active Directory
• Bash
• C#
• Cloud
• Support
• Linux
• Network
• PowerShell
• Python
• Ruby
• Security
• SharePoint
• TCP/IP
• Unix
• Web
• Windows
• Marketing

More

At Experian, we are a global data and technology company committed to unlocking the power of data to drive opportunities for individuals and businesses worldwide. Our Offensive Security team focuses on enhancing organizational security through risk clarification and validating the strength of our security controls by simulating real-world attacks. We proudly offer a comprehensive benefits package, which includes competitive compensation, pension plans, healthcare, and generous leave. This is a fully remote UK-based position, where we believe in the value of diversity and inclusion in fostering innovation and success.

last updated 13 week of 2026