Offensive Security Engineer

About the role

LSEG is looking for an Offensive Security Engineer to join its Offensive Security Operations team. The role manages vulnerability discovery, offensive testing and remediation across the group, protecting the business from sophisticated cyber threats. It works with third-party vendors to plan and run testing programmes such as regulatory threat intelligence led pen testing and red teaming, bug bounty, continuous external attack surface management and Active Directory security posture management.

Key responsibilities

• Collaborate with external vendors, regulators and leadership teams to coordinate the timely delivery of testing requirements
• Review vulnerability reports, validate reported issues and triage them by risk
• Help teams understand vulnerabilities and validate fixes through retesting
• Coordinate remediation by defining actions, owners, timelines and follow-up
• Use engineering skills to automate and scale security programme objectives
• Share ideas on improvements and innovation, and explore how AI and automation can improve current and future initiatives

Required profile

• Bachelor's degree in technology or equivalent experience and cyber security certifications
• Red teaming, penetration testing or bug bounty background is advantageous
• Experience building AI agent workflows or deploying and managing security tooling is also advantageous
• Understanding of large-scale enterprise IT environments
• Strong verbal and written communication and presentation skills
• Ability to work in a fast-paced environment as a problem solver with initiative

Required skills

• Knowledge of security vulnerabilities and common software engineering flaws
• Network defence analytical models such as Kill Chain, MITRE ATT&CK and OWASP Top 10