Minimum qualifications:

• Bachelor's degree in Computer Science, Information Security, a related field, or equivalent practical experience.
• 5 years of experience in security engineering, offensive security (Red Team/Purple Team), or platform engineering roles.
• Experience with infrastructure-as-code and GitOps (e.g., Terraform, Helm, ArgoCD) and cloud-native security orchestration.
• Experience with Kubernetes security (e.g., workload isolation, RBAC, network policies) and container orchestration.
• Experience in scripting and development languages (e.g., Python, Go) for building custom security tooling, automation, and exploit Proof-of-Concept (PoCs).
• Active, or the ability to obtain, a Developed Vetting (DV) UK security clearance.

Preferred qualifications:

• Advanced offensive security certifications (e.g., OSCP, OSEP, OSCE, GXPN).
• Experience in conducting full-scope Red Team engagements and Purple Team exercises in cloud-native environments.
• Experience developing custom exploits, adversary emulation scenarios, or security automation frameworks for internal testing.
• Knowledge of cloud-native logging, monitoring, and Security Information and Event Management (SIEM) integration for detecting sophisticated adversary tactics.
• Understanding of Kubernetes attack surfaces, including container escapes, privilege escalation, and lateral movement techniques.
• Current and active UK Developed Vetting (DV) Security Clearance.