Principal Offensive Security Operator

About the role

We are seeking a Principal Offensive Security Operator to join a government client on a 12‑month contract. The role is primarily remote with occasional travel to London and operates inside IR35.

Key responsibilities

• Plan and execute complex, multi‑phase red‑team operations and scenario‑driven adversary simulations.
• Develop, deploy and maintain attack infrastructure, C2 frameworks and infrastructure‑as‑code tooling.
• Conduct threat‑intelligence analysis, vulnerability exploitation across web, cloud and infrastructure platforms.
• Perform post‑exploitation, persistence and lateral movement, analysing attack paths to high‑value targets.
• Engage in GCASE, GBEST, CBEST and TIBER assessments while adhering to operational‑security best practices.

Required profile

• Proven experience in red‑team tool development and deployment.
• Ability to lead and coordinate multi‑disciplinary offensive security engagements.
• Strong communication skills to explain technical risks to senior stakeholders.
• Security Check (SC) clearance is essential.

Required skills

• C2 frameworks
• Infrastructure‑as‑code technologies
• Microsoft Entra, Active Directory, M365, macOS
• Kubernetes, CI/CD pipelines
• AWS and Azure cloud platforms

What we offer

• Daily rate of £640‑£740 (inside IR35, umbrella solution).
• 12‑month contract with potential extension.
• Mainly remote work with occasional London visits.
• Opportunity to work on high‑impact government cyber‑security projects.