Senior Red Team Analyst
// Role Summary
Join BAE Systems as a Senior Red Team Analyst to test and validate security controls, identify weaknesses, and contribute to shaping a safer future through advanced defence solutions.
// Key Responsibilities
- Conduct Red Team Exercises, Critical Control Testing, Cyber Hygiene Assessments, and Penetration Testing.
- Develop comprehensive reports on vulnerabilities and ensure their resolution.
- Identify and raise security weaknesses and misconfigurations.
- Contribute to the evolution of Red Team services.
- Maintain a broad understanding of the external threat environment and attacker tactics.
// Role Specification
Senior Red Team Analyst
Join BAE Systems and be part of a team pioneering progress and protecting what matters most. You will be trusted to deliver advanced, technology-led defence, aerospace, and security solutions for a safer future.
About the Role:
As a Senior Red Team Analyst, you will be responsible for the continual testing and validation of security controls and SOC detection capabilities. Your work will provide assurance that defensive measures remain effective against evolving threats, contributing to organizational objectives and maintaining high security standards. You will provide assurance to Cyber Operations leadership on the effectiveness of security monitoring and detection capabilities.
Core Duties:
- Support the Red Team with Red Team Exercises, Critical Control Testing, Cyber Hygiene Assessments, and Penetration Testing.
- Develop comprehensive and accurate reports for internal audiences, including the grading of vulnerabilities within the context of BAE Systems, and ensure their passing onto resolver groups for resolution.
- Ensure vulnerability resolution is conducted in line with documented processes.
- Identify security weaknesses and misconfigurations to ensure they are raised with the appropriate resolver groups.
- Contribute to the development of Red Team services through people, process, and technology.
- Maintain a broad understanding of the external threat environment and attacker tactics, techniques, and procedures (TTPs).
Essential Skills:
- Proven experience in both infrastructure and web application security testing utilizing proven testing methodologies.
- Demonstrable experience with open-source security testing tools such as Kali and Parrot operating systems.
- An understanding of software engineering principles.
- Confidence in delivering comprehensive and accurate security testing reports for internal audiences and delivering briefings on the outcome if required.
- Broad and detailed experience of technologies including but not limited to firewalls, IDS/IPS, Active Directory, endpoint protection, Windows Server, Linux, TCP/IP, Networks, Cloud, CDN’s, and Vulnerability Management.
The Cyber Operations Team:
The Cyber Operations team plays a critical role in protecting BAE Systems from an ever-evolving range of cyber threats. The team comprises expertise across Threat Intelligence, Detection Engineering, Incident Response, Active Defence, and Red Teaming, continuously evolving capabilities to stay ahead of emerging threats. They are committed to developing world-class cyber professionals, providing access to industry-leading training.
Location & Working Arrangements:
This role is based in Preston, Frimley, or Filton with a hybrid working model requiring 2 days per month onsite. A range of hybrid and flexible working arrangements are available; please speak to your recruiter for specific options.
Security & Export Control:
Please be aware that many roles at BAE Systems are subject to security and export control restrictions. These restrictions may affect eligibility based on factors like nationality, previous nationalities, and place of birth. All applicants must achieve Baseline Personnel Security Standard (BPSS). Many roles require higher levels of National Security Vetting, often necessitating 5 to 10 years of continuous residency in the UK.