Offensive Security Lead

BAT is evolving at pace into a global multi-category business. Our purpose is to create A Better Tomorrow™ by Building a Smokeless World.
To achieve our ambition, we are looking for colleagues who are ready to join us on this journey! Tomorrow can’t wait, let’s shape it together!

We are looking for an Offensive Security to lead and develop BAT's vulnerability assessment and charge simulation capabilities. The ideal candidate will bring strong hands-on technical expertise, team leadership experience, and a proactive approach to identifying security risks. This role is responsible for the delivery and continuous improvement of BAT's offensive security services.

Your key responsibilities will include:

• Lead Offensive Security activities across BAT and handle the Offensive Security team and improve processes, standards, and ways of working.
• Maintain and improve methods for penetration testing, tooling, and practices and lead complex penetration testing projects and ensure high-quality delivery.  
• Handle external penetration testing providers and partners specializing in proactive security measures.  
• Deliver training and knowledge-sharing activities to develop team capabilities.
• Know the latest emerging threats, vulnerabilities, and methods related to proactive security testing.    
• Chip in to Adversary Emulation and Red Team activities and support security investigations and threat analysis activities when required.
• Collaborate with Security Operations, Incident Response, Threat Intelligence, Threat Hunting, and Detection
• Engineering teams to build and complete Red Team simulation exercises. Report key findings, trends, and risks to collaborators and leadership.  

What are we looking for?

• Bachelor’s degree or equivalent experience in computer science, Information Technology, Cybersecurity, or a related field.  
• Relevant security certifications (e.g., OSCP, OSEP, OSCE, GPEN, CRTO, CRTL) are an advantage.
• Consistent record in cybersecurity, with a proven focus on penetration testing and offensive security.   
• Experience leading penetration testing engagements and providing technical oversight to internal teams and/or third party providers.

• Experience operating and improving offensive security capabilities, including DAST, Bug Bounty Programs,
• Vulnerability Disclosure Programs (VDP), and Charge Surface Management (ASM).  Solid grasp of penetration testing methodologies, tools, techniques, and frameworks.
• Experience with Red Team, Purple Team, or Adversary Emulation exercises.
• Experience performing cloud security assessments across Azure, AWS, and/or GCP.

What we offer you?

• We offer a market leading annual performance bonus (subject to eligibility)
• Our range of benefits varies by country and includes diverse health plans, initiatives for work-life balance, transportation support, and a flexible holiday plan with additional incentives
• Your journey with us isn't limited by boundaries; it's propelled by your aspirations. Join us at BAT and become a part of an environment that thrives on internal advancement, where your career progression isn't just a statement – it's a reality we're eager to build together. Seize the opportunity and own your development; your next chapter starts here.
• You'll have access to online learning platforms and personalized growth programs to nurture your leadership skills
• We prioritise continuous improvement within a transformative environment, preparing for ongoing changes

WHY JOIN BAT?
We’re one of the few companies named as a Global Top Employer by the Top Employers Institute – certified in offering excellent employee conditions.

Collaboration, inclusion and partnership underpin everything we do here at BAT. We are looking forward to enabling every individual to thrive, regardless of gender, sexual orientation, marital or civil partnership status, gender reassignment, race, religion or belief, colour, nationality, ethnic or national origin, disability, age, skills, experience, education, socio-economic and professional background, veteran status, perspectives and thinking styles. We know that embracing talent from all backgrounds is what makes us stronger and best prepared to meet our business goals.

We see the career breaks as opportunities not obstacles. Through The Global Returners program, we support professionals looking to restart their careers after an extended absence from the workforce (e.g. time out caring for family, parental leave, national service, sabbatical and/or starting an own venture).

Come bring your difference and see what is possible for you at BAT. Learn more about our culture and our award winning employee experience here.

If you require any reasonable adjustments or accommodations to help you perform at your best during the recruitment process, you are encouraged to notify us. We are fully committed to support you by making appropriate arrangements for you to demonstrate your full potential.