Cyber Security Offensive Specialist

Salary: £37,000 - 44,000 per year

Requirements:

• Hands-on penetration testing experience across networks, infrastructure, web applications, APIs, and cloud platforms.
• Experience planning and executing red team or adversary simulation exercises.
• Strong understanding of identifying and exploiting vulnerabilities across Active Directory, cloud environments, applications, and enterprise systems.
• Experience using industry-standard offensive security tools such as Burp Suite, Metasploit, Cobalt Strike, Nmap, BloodHound, and related tooling.
• Ability to develop custom scripts and automation using languages such as Python, Java, C#, or C++.
• Experience producing clear technical reports and communicating risk effectively to varied stakeholder groups.
• Experience working within a corporate or enterprise environment where operational impact and risk management are critical considerations.
• One or more of the following certifications would be advantageous: OSCP, CRTO, CWEE, CEH, CompTIA Security+, CISSP, CISM.
• A degree in Cyber Security, Computer Science, Information Technology, or a related discipline would also be beneficial.
• Strong analytical mindset and a passion for uncovering vulnerabilities before attackers do.
• Excellent communication skills with the ability to explain complex technical concepts clearly and effectively.
• High levels of integrity, professionalism, and accountability when working with sensitive information and systems.
• Proactive approach to learning, staying current with emerging threats and security research.
• Ability to work independently while building strong collaborative relationships across teams.

Responsibilities:

• Plan and execute authorised penetration tests across internal and external networks, systems, applications, and cloud environments.
• Conduct red team exercises that simulate real-world attack scenarios to evaluate people, processes, and technology controls.
• Research and emulate emerging threat actor tactics, techniques, and procedures to ensure testing remains aligned to current threats.
• Develop and customise scripts, tooling, and exploits to support offensive security engagements.
• Assess the security of cloud platforms, APIs, web applications, third-party integrations, and enterprise infrastructure.
• Produce high-quality technical reports and present findings to both technical and non-technical stakeholders.
• Work closely with IT, Cyber Security, and business teams to prioritise remediation efforts and enhance security controls.
• Partner with defensive security teams to strengthen detection and response capabilities through shared knowledge and attack simulation activities.
• Support the development of security standards, policies, and hardening practices informed by offensive security insights.

Technologies:

• Active Directory
• C#
• Cloud
• Support
• Java
• Python
• Security
• Web

More:

We are DAC Beachcroft, an international law firm with a broad-based commercial and insurance practice. Technology plays a critical role in helping our people, business, and clients reach their full potential, and our Cyber Security team is focused on innovation, continuous improvement, and staying ahead of an evolving threat landscape. We are looking for an experienced Cyber Security Offensive Specialist to join our growing Technology team in Bristol on a permanent, hybrid basis, reporting to the Head of Cyber Security. We are committed to providing an inclusive and accessible recruitment process as a Disability Confident Scheme employer.

last updated 36 week of 2026