We Are Orbis Group Ltd

Penetration Tester - Vulnerability Research - AI Offensive Security - Exploit Development - Red Team requirement for an urgent start. The Penetration Tester - Vulnerability Research - AI Offensive Security - Exploit Development - Red Team will be working for a major global financial client, supporting an offensive security function focused on deep manual testing, vulnerability research and frontier-model-assisted discovery across a complex, highly regulated technology estate. Penetration Tester - Vulnerability Research - AI Offensive Security - Exploit Development - Red Team Key Skills: Strong hands-on offensive security background, with proven senior-level experience delivering manual penetration tests across web applications, APIs, infrastructure, cloud and internal networks Demonstrable vulnerability research capability, including source code review, reverse engineering, fuzzing and the discovery of novel issues beyond automated scanner output Practical experience using frontier AI/LLM tooling to accelerate reconnaissance, code and log analysis, payload generation and hypothesis testing, with the judgement to validate and discard model output Proven exploit development and validation experience, safely proving impact and chaining findings to demonstrate realistic attack paths rather than reporting theoretical risk Risk-based triage and prioritisation skills, translating technical findings into business impact, exploitability ratings and clear, actionable remediation guidance for engineering teams Strong understanding of MITRE ATT&CK, OWASP Top 10/ASVS, CVSS and threat modelling techniques, with experience running structured, objective-led testing campaigns Experience testing cloud-native and hybrid environments (Azure, AWS, GCP), containers, CI/CD pipelines and identity layers (eg Entra ID, OAuth/OIDC, SAML, MFA) Excellent written and verbal communication skills, with the ability to defend findings to engineering, risk, audit and senior leadership stakeholders; industry certifications (eg OSCP, OSCE/OSEP, Crest CCT, GXPN) advantageous Penetration on Tester - Vulnerability Research - AI-Assisted Offensive Security - Exploit Development - Red Team - Contract inside IR35 - Hybrid - Long-term Programme - Urgent Start

Full Stack Engineer - IAM - Node.js - React - Azure - SQL - APIs - Identity & Access Management requirement for an urgent start. The Full Stack Engineer - IAM - Node.js - React - Azure - SQL - APIs - Identity & Access Management will be working for a major global financial client, building an AI-enriched System of Intelligence for Identity & Access Management across a complex, global enterprise environment. Full Stack Engineer - IAM - Node.js - React - Azure - SQL - APIs - Identity & Access Management Key Skills: Strong full stack engineering background, with proven hands-on delivery using Node.js (TypeScript) on the Back End and React on the Front End within enterprise-scale environments Proven experience designing, building and consuming RESTful APIs and microservices, including authentication, authorisation, rate limiting, versioning and API security best practice Hands-on Azure experience across App Services/Functions, containers (AKS), storage, Key Vault, messaging and CI/CD pipelines (Azure DevOps or GitHub Actions) Strong SQL and data modelling skills, with experience building performant queries, schemas and data pipelines to consolidate identity data from multiple upstream sources Practical Identity & Access Management exposure, ideally including Entra ID, SailPoint, Okta or CyberArk, covering joiner/mover/leaver processes, entitlements, RBAC, access reviews and privileged access Experience delivering enterprise integrations with HR, ITSM, directory, SIEM and IGA platforms, handling large-scale data reconciliation and event-driven workflows Exposure to embedding AI/ML or LLM capability into products, eg anomaly and access-risk detection, entitlement recommendations, natural language search or automated certification insights Comfortable working in Agile delivery teams with strong engineering discipline (unit testing, code review, observability) and the stakeholder skills to work with security, architecture, compliance and product owners Full Stack Engineer - IAM - Node.js - React - Azure - SQL - APIs - Identity & Access Management - Contract Inside IR35 - Hybrid - Long-term Programme - Urgent start