National AI Awards 2025Discover AI's trailblazers! Join us to celebrate innovation and nominate industry leaders.

Nominate & Attend

Security Engineer

Hack The Box
united kingdom
1 month ago
Applications closed

Related Jobs

View all jobs

Security Engineer

Security Engineer

Security Engineer - Cheadle

Security Engineer - Azure

Security Engineer - SC Cleared

Security Engineer - SC Cleared

Please note - this position is based in the UK and we, unfortunately, are not able to provide visa sponsorship.

What we’re offering (we know, everyone jumps to this section first!)

  • Salary of £45,000 - £65,000
  • Share options so you benefit from our success
  • 28 days paid holiday plus bank holidays, and an additional 5 unpaid if you want them ️
  • Flexible working - some of us work from home, some in office (East London), and everything in between. We're flexible
  • Training budget for one major certification / course per year
  • Regular (optional) socials
  • As a small but growing team, we're flexible and offer a level of autonomy that allows you to make meaningful and lasting contributions to Intruder and our customers.

About Intruder
We make it easier to not get hacked.

Every day people sign up for online services, enter their personal data, and put themselves at risk of malicious actors. We work to enable these services to be better protected, making sure new vulnerabilities are found and closed rapidly before your data can be stolen.

We do this with a powerful but easy to use platform that is low on noise and high on trust, information, and context – so when we say it’s critical, companies know they have to act fast.

In the past 2 years, we have grown rapidly in product capability, customer base, revenue, and employee size. The next few years promise more of the same, with plenty of growth opportunities for us and our teams!

About the this position:
We are looking for a Security Engineer to help scan our customers for the latest critical vulnerabilities, write new vulnerability checks, and automate the penetration testing process at scale. This role is varied and includes:

  • Writing new vulnerability detections with Nuclei, and curating crowd-sourced checks for inclusion into the Intruder platform
  • Custom scanning of customer targets for emerging critical weaknesses: Rapid Response
  • Writing technical content for our website about the latest vulnerabilities
  • Automate the pentesting methodology to carry out checks at scale against multiple customers simultaneously
  • Work on projects to research and provide evidence for novel improvements to the Intruder platform
  • Providing technical assistance on client calls, and occasionally assisting at events
  • What we think you need to be successful:
  • At least 2 years' industry experience in offensive security roles
  • A technical academic background in software engineering or cyber security
  • One or more of the following industry qualifications:
    • Offensive Security Certified Professional (OSCP)
    • Offensive Security Web Expert (OSWE)
    • Offensive Security Evasion Techniques & Breaching Defences (OSEP)
    • CREST Registered Penetration Tester (CRT)
    • CREST Certified Web Application Tester (CCT APP)
    • CREST Certified Infrastructure Tester (CCT INF)
Experience in some or all of the following:
  • Network penetration testing and a thorough understanding of network protocols
  • Web application penetration testing and a thorough understanding of application layer vulnerabilities
  • Automation of simple tasks and complex chains using Python, Ruby, or Golang
  • Developing, extending, or modifying detection and fingerprinting code
  • Developing, extending, or modifying exploits, shellcode or exploit tools
  • Strong knowledge of tools used for web application, and network security testing including commercial vulnerability scanning engines
  • Cloud services, including how to interact with, and assess them for weaknesses
  • Comfortability with client-facing calls in a consultancy setting
  • Excellent technical writeup skills

Hiring Process:
  1. Company intro (30 minutes, remote): initial chat with People team for you to learn more about the role and tell us what you're looking for
  2. Security Intro (40 minutes, remote): introductory call to discuss your experience with a member of the Security team
  3. Technical Task: a mini project to complete in your own time, before the final interview
  4. Final Interview: (1 hour 30 minutes): final technical interview questions, and discussion of your technical task


#J-18808-Ljbffr

National AI Awards 2025

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Jobs Careers

Cyber Security Jobs Skills Radar 2026: Emerging Frameworks, Tools & Certifications to Learn Now

Cyber threats are evolving—and so must the people defending against them. As ransomware, AI-enhanced phishing, and supply chain attacks grow more advanced, UK employers are urgently hiring cyber security professionals with the right mix of strategic and hands-on skills. Welcome to the Cyber Security Jobs Skills Radar 2026, your go-to guide for the most in-demand tools, frameworks, certifications, and technologies shaping the UK's cyber workforce. Whether you're a SOC analyst, penetration tester, or cloud security architect, this annual radar is designed to help you stay ahead of the market.

Jobs

How to Find Hidden Cyber Security Jobs in the UK Using Professional Bodies like BCS, CIISec & More

The demand for skilled cyber security professionals in the UK has never been higher. With threats increasing in sophistication and frequency, organisations are urgently hiring ethical hackers, threat analysts, GRC specialists, and security architects. But many of the most valuable roles—particularly in government, defence, and critical infrastructure—are never publicly advertised. Instead, these jobs are shared behind the scenes through trusted networks, private communities, and professional bodies. In this article, we explore how to uncover hidden cyber security jobs in the UK using organisations like the BCS (The Chartered Institute for IT), CIISec (The Chartered Institute of Information Security), ISACA, and ISC² UK Chapter. We’ll show you how to use membership directories, special interest groups, CPD events and informal networks to gain early access to roles most people never see.

Jobs

How to Get a Better Cyber Security Job After a Lay-Off or Redundancy

Redundancy is never easy—especially in a fast-moving field like cyber security, where your skills and experience are constantly evolving. But if you’ve recently been made redundant from a cyber security role, know this: the UK cyber workforce remains in high demand, and your expertise is more valuable than ever. Whether you’re a SOC analyst, penetration tester, incident responder, security architect or GRC specialist, there are still thousands of opportunities across sectors including finance, defence, government, retail, and critical infrastructure. This guide will help you turn redundancy into a career relaunch, with a clear action plan tailored to the UK cyber security job market.

🍪 We use cookies to enhance your browsing experience on our website. By continuing to use this site, you consent to the use of cookies as described in our Cookie Policy. You can review our Cookie Policy for more information.