Red Team Security Specialist
Clifford Chance, a leading international law firm with over 30 offices worldwide, is seeking a Red Team Security Specialist to join their Information Security team in London. This role reports directly to the Head of Information Security and is designed for a fast-learning, self-motivated individual eager to enhance the firm's security capabilities. The firm is committed to providing high-quality legal advice by combining global standards with in-depth local expertise, fostering an inclusive and team-oriented work environment.
As a Red Team Security Specialist, your primary responsibilities will include conducting comprehensive offensive penetration testing on both on-premises and cloud infrastructures to identify vulnerabilities and recommend remediation strategies. You will perform security assessments on cloud-based applications, ensuring compliance with industry standards and best practices. Additionally, you will execute red team exercises to simulate real-world attack scenarios, testing the firm's detection and response capabilities. Other duties involve assessing the security of IoT devices, SmartBuilding digital landscapes, data lakes, and web-based APIs, as well as providing guidance on API security testing and secure practices. Collaboration with cross-functional teams to implement security measures and enhance the firm's overall security posture is also a key aspect of this role.
Ideal candidates should possess extensive experience in security testing and red teaming, with a strong background in information security. The ability to conduct a wide range of security testing activities and provide strategic advice to the business is essential. Candidates should be capable of quickly assimilating information to assess and document risks, engaging with individuals at various levels of seniority. An organized approach to managing and prioritizing multiple concurrent assignments is crucial. While a degree-level education is advantageous, certifications such as CREST, CHECK, OSCP, OSWE, or OSWA, and full membership with the IISP are highly beneficial. This role may require security clearance in the future.
Clifford Chance offers a competitive salary and a comprehensive benefits package, including financial, wellbeing, lifestyle, and family-friendly benefits. The firm supports continuous professional development through formal training, informal coaching, mentoring, and on-the-job learning. Due to the nature of this role, it can be performed mostly remotely, with the expectation of coming into the office only as business needs require.
Joining Clifford Chance means becoming part of a dynamic and diverse team committed to excellence and innovation. The firm offers opportunities for growth and learning, encouraging employees to thrive in a supportive and inclusive environment. By applying, you will contribute to enhancing the firm's security posture and play a pivotal role in safeguarding its information assets.