Red Team Security Specialist

Overview

In this role you will strengthen the firm’s security posture by leading offensive testing across on‑premise and cloud environments, internal infrastructure, IoT, and APIs. You will work closely with the Information Security team and cross‑functional stakeholders to deliver actionable findings, align with audits, and support ongoing certification efforts. The role offers broad exposure to cutting‑edge security testing, AI security considerations, and real‑world risk reduction in a globally trusted law firm.

Pay / Benefits

• hybrid working
• broad benefits covering financial, wellbeing, lifestyle and family support
• opportunity for formal training and mentoring

Responsibilities

• Conduct red team offensive penetration testing across IT infrastructure (on‑prem and cloud) to identify vulnerabilities and provide remediation recommendations
• Perform security assessments of cloud applications following industry standards and best practices
• Run red team exercises to evaluate detection and response capabilities internally and externally
• Assess security of internal infrastructure, IoT devices, and sensors for vulnerabilities
• Evaluate SmartBuilding digital landscape and data lake security
• Test web APIs and applications for vulnerabilities and advise on remediations
• Provide guidance on API security testing and carry out API security assessments
• Collaborate on developing testing models for Generative AI security
• Work with teams to reduce vulnerabilities and align with audits and client requirements
• Prepare reports and presentations for both technical and non‑technical stakeholders
• Stay updated on trends, threats, and technologies to pre‑empt risks
• Develop and maintain security policies, procedures, and guidelines
• Serve as primary contact for security testing engagements
• Support continuous improvement and client/audit compliance
• Engage with security industry groups to align with best practices

Key requirements

• Extensive experience in security testing and red teaming
• Ability to communicate complex concepts across the firm
• Experience coordinating external security requirements and driving improvements
• Strong risk assessment and documentation skills
• Organised, able to manage multiple concurrent assignments
• Degree‑level education is likely but not essential; CREST/CHECK/OSCP/OSWE/OSWA status and IISP membership are advantageous
• Ability to work with external clients and maintain professional relationships
• Experience in structured documentation (process, format, version control)

• strong communication
• stakeholder engagement
• organised and methodical
• red teaming
• penetration testing (on‑prem & cloud)
• cloud security assessments

…