Role: Principal Offensive Security Operator REF 105257
Contract Length: 12 months
Location: Remote with occasional travel to London
IR35: Inside
Pay Rate to Intermediary: Market Rate
Security Clearance: SC requested
Spinwell is recruiting for a Principal Offensive Security Operator for an excellent opportunity within the public sector.
RESPONSIBILITIES OF THE PRINCIPAL OFFENSIVE SECURITY OPERATOR
- Designing and executing threat intelligence-based full-spectrum cyber-attack simulations, including long-term campaign planning, persistence, and post-exploitation operations against the client. Adopting a red team approach, discovering high-impact weaknesses across the organisation’s most important technology estates and business areas, and validating whether the overarching cyber security apparatus is working effectively.
- Communicating technical findings in clear risk and impact-focused terms to senior stakeholders, enabling effective understanding and support for strategic decision-making.
- Development and implementation of tools and methodologies to augment and to automate team offensive and analytical capability.
- Mentoring junior Red Team members to improve their skills and capabilities, along with wider knowledge transfer to other security and non-security teams to help build a culture of cyber security in the department.
SKILLS/EXPERIENCE OF THE PRINCIPAL OFFENSIVE SECURITY OPERATOR
- Proven ability to plan and execute complex, multi-phase operations.
- Scenario-driven adversary simulation
- Threat intelligence analysis and assessment
- Exploitation of a wide range of technologies, including infrastructure, web application and cloud platforms: Microsoft Entra, Active Directory, M365, macOS. Kubernetes, CI/CD, AWS, Azure.
- Post-exploitation, persistence and lateral movement, including tactical analysis of attack paths leading to high-value targets
- Conducting engagement activities in line with operational security best practice and within a range of threat actor capabilities and tradecraft
- Deep understanding of security technologies found in end-user and server operating systems and supporting infrastructure, including relevant architectural and operational patterns of at-scale deployment and administration of complex legacy and modern enterprise environments.
- Experience using, developing and deploying tools in support of red teaming activities, including attack infrastructure, C2 frameworks and infrastructure-as-code technologies.
- Strong communication skills with the ability to clearly explain complex technical issues related to vulnerabilities and risk to diverse audiences, including senior stakeholders, in support of vulnerability management, threat mitigation, and risk-based decision-making.
- Participation in GCASE / GBEST / CBEST / TIBER engagements.
If you are a Principal Offensive Security Operator, apply now or send your CV to Spinwell!
We welcome all applications regardless of background, in line with our commitment to diversity, equality and inclusion.
Applying to this or any other vacancy advertised by Spinwell Ltd constitutes an agreement for Spinwell Ltd to hold your details for 24 months for the purpose of assessing suitability for the advertised position and to make you aware of any other positions deemed suitable of which You will make you aware by means of either email, text or phone. In line with GDPR regulations you are able to request your details be removed from the company data at any time by emailing us
Disability Confident
As a member of the disability confident scheme, the client guarantees to interview all candidates who have a disability and who meet all the essential criteria for the vacancy. In cases where we have a high volume of candidates who have a disability who meet all the essential criteria, we will interview the best candidates from within that group.
Armed Forces Covenant
The client is proud to support the Armed Forces Covenant and as such, we guarantee to interview all veterans or spouses / partners of military personnel who meet all the essential criteria for the vacancy. In cases where we have a high volume of ex-military candidates / military spouses or partners, who meet all of the essential criteria, we will interview the best candidates from within that group.
If you qualify for the above, please notify us and quote the role you are applying for.
We will be in touch to discuss your suitability and arrange your Guaranteed Interview.
Should you require reasonable adjustments at any point during the recruitment process or if there is a more accessible way for us to communicate, please do let us know.