About this role
Salary: £? - ? per year
Requirements
- Hands-on experience implementing and managing security validation, automated penetration testing, breach and attack simulation, threat emulation, or cyber deception platforms such as Picus, SafeBreach, AttackIQ, Cymulate, Pentera, XM Cyber, or Horizon3 NodeZero
- Strong understanding of offensive and defensive security, attack paths, vulnerabilities, control gaps, remediation, retesting, and validation
- Experience across network, endpoint, email, web, and cloud security, including monitoring, telemetry, log analysis, and incident investigation
- Experience managing security tooling through its lifecycle and integrating it with enterprise platforms
- Experience supporting governance and compliance activity, or knowledge of frameworks such as ISO 27001 and NIST
- Desirable: exposure management or CTEM, MITRE ATT&CK, Python, Bash or PowerShell scripting, vulnerability management tooling, financial services experience, CISSP, OSCP, or CEH
- Candidates whose experience is mainly SOC monitoring or network engineering are unlikely to be a match
Responsibilities
- Implement, run, and tune security validation, automated penetration testing, breach and attack simulation, threat emulation, and deception platforms
- Analyze attack paths, vulnerabilities, and control gaps; drive risk-based remediation and retest to verify fixes
- Integrate security controls with enterprise network, endpoint, email, web, and cloud platforms, using telemetry and log analysis to investigate and troubleshoot
- Manage security technologies through their lifecycle, from deployment and upgrades to handover and replacement
- Support governance, audit, and compliance activities, maintaining accurate and accessible evidence
- Act as the subject matter expert for engineering and business-as-usual teams
Technologies
- Bash
- Cloud
- Support
- Network
- PowerShell
- Python
- Security
- Web
More
We are recruiting a contract Cyber Security Technology SME for the IT Security team of a leading financial services organisation in London. The team operates platforms that test and validate security controls across on-premises, cloud, and hybrid environments. The initial contract runs to 30 April 2027, with an umbrella rate of £544.83 per day, inside IR35. The role requires four days per week on-site in London on an ongoing basis. It may suit candidates with experience as a Security Validation Engineer, Breach and Attack Simulation Engineer, Penetration Testing Engineer, Purple Team Engineer, or Exposure Management Engineer.
We are Deerfoot Recruitment Solutions Ltd, an independent UK technology recruitment consultancy. For every CV we send to clients, we donate £1 to The Born Free Foundation, and we are a Climate Action Workforce in partnership with Ecologi. We also offer a referral reward programme with payouts at interview and placement milestones. We act as an Employment Business in relation to this vacancy.
last updated 46 week of 2026