BDO Digital Senior Offensive Security Analyst

Overview

Ideas People TrustWe''re BDO. An accountancy and business advisory firm, providing the advice and solutions entrepreneurial organisations need to navigate today''s changing world.We work with the companies that are Britain''s economic engine - ambitious, entrepreneurially-spirited and high growth businesses that fuel the economy - and directly advise the owners and management teams that lead them.We''ll broaden your horizonsAt our core, we believe that growth comes from exposure to diverse challenges. In this role, you’ll have the opportunity to work across a wide range of engagements, thanks to the trust and scale of our clients.You will get hands-on experience with web application and API testing, Wireless assessments, Internal infrastructure tests, Mobile App security, Red and Purple team operations, Physical intrusion testing, hardware analysis, and more. No two projects are quite the same, and that''s exactly how we like it. This variety allows our team to explore different domains, deepen existing strengths, and discover new areas of interest, all while solving real-world problems in live environments. Whether you’re still shaping your focus or refining an existing specialty, you’ll have space here to grow meaningfully.Manage risk for our clients to make them stronger for the future.Our Digital Services are designed to enable organisations to leverage our innovative methodologies, technology, and highly experienced professionals to manage their business risks most effectively. Working at BDO offers curious-minded people excellent exposure to all aspects of business strategy, operations and more.We’re a dynamic team of internal auditors, accountants, technology, and business transformation experts with disciplines in finance, risk, projects and change, cyber and digital, amongst others.Our extensive network and depth of experience mean we work in a highly client-centric way, focused on providing a collaborative, tailor-made advisory service. Our team helps clients manage their business-critical threats, such as cyber events, and build resilient businesses capable of responding to internal and external events which may interrupt their operations. Being known for exceptional client service in our chosen markets, we put innovation and agility at the heart of everything we do.This is your chance to join a fast-paced, growing team and help shape the future of Digital at BDO.Responsibilities

We are seeking a highly skilled and experienced Senior Offensive Security penetration tester to join our dynamic team. This role involves conducting sophisticated penetration testing and red team engagements across various client systems and applications. The successful candidate will be instrumental in identifying vulnerabilities, enhancing client security postures, and leading initiatives to develop cutting-edge penetration testing methodologies and tools. Clients across industries and geographies, staying at the forefront of knowledge of the threat landscape, cyber defence best practices and regulatory expectations.Conduct sophisticated penetration testing and red team engagements across diverse client systems and applications.Identify vulnerabilities and strengthen client security postures.Lead initiatives to develop cutting-edge penetration testing methodologies and tools.Stay at the forefront of threat intelligence, cyber defence best practices, and regulatory expectations.Qualifications

Strict Requirement: Strong certification in penetration testing such as OSCP (Offensive Security Certified Professional), CTM (Check Team Member), CRT (CREST Registered Tester) and OSWA (Offensive Security Web Attacks) or advanced certifications such as OSEP, CCSAM and CTL.Solid experience in offensive security-through professional penetration testing, red teaming, bug bounty, capture-the-flag, or related personal/research work.Proven ability to deliver impactful client engagements with technical depth and risk understanding.Deep knowledge of network protocols, services, operating systems, and applications and how to assess them.Proficiency with tools such as Metasploit, Burp Suite, proxies (Caido, ZAP), Nessus, Cobalt Strike or other C2 frameworks; bonus for building tools or contributing to community projects.Excellent problem-solving skills and a persistent, curious, ethical hacking mindset.Experience coding/scripting custom tools in Python, Bash, PowerShell, or equivalent.Ability to communicate technical findings clearly to both technical and non-technical stakeholders.Be yourself

It’s at the core of the company’s and team’s vision. You’ll be able to truly be yourself; we’ll recognise and value you for who you are and celebrate your contributions. We’re committed to agile working, and we offer the opportunity to work in ways that suit you, your teams, and the tasks at hand.At BDO, we’re committed to helping you achieve your personal and professional goals, with structured development frameworks, resources, and mentorship.We’ll align your client engagements with your learning objectives, giving you the chance to apply new skills, explore areas of interest, and gain practical experience, with our team culture emphasizing peer support, collaboration, and knowledge sharing on every project.We’re in it together

Mutual support and respect are core values. Our agile framework keeps us connected so teams can share ideas and help one another. You’ll have access to people and resources to do your best work, and we encourage you to build your network and share skills.We’ve invested in state-of-the-art collaboration spaces in our offices. BDO’s people bring knowledge and experience, and you’ll be encouraged to learn and grow with multidisciplinary events and dedicated resources.We’re looking forward to the future

BDO helps entrepreneurial businesses succeed and fuel the UK economy. Our success is powered by our people, and we’re always investing in you. Across the UK thousands of minds come together to help companies achieve their ambitions.We’ve got a clear purpose and a future to shape, building on our strengths with global reach, integrity and expertise. We shape the future with openness and clarity, empowering people to think creatively about how we can do things ..... full job details .....