Red Team Security Specialist

Who we are We are one of the largest international law firms in the world. With over 30 offices across the globe, we strive to exceed the expectations of our clients, providing them with the highest-quality advice and legal insight, which combines the firm’s global standards with in-depth local expertise. Our firm, work and people span jurisdictions, cultures, and languages. We offer our clients a truly international perspective. We believe every career should be rewarding and stimulating – full of opportunities to learn, thrive, and grow. That’s why we’re so proud of our inclusive, friendly, and team-based approach to work. Our one firm global strategy is focused on targeted growth led by the needs of our core clients, those who we can best support with the breadth and depth of Clifford Chance expertise, across the sectors and geographies, which matter most to them. You’ll find our clients in commercial and industrial sectors, the financial investor community, governments, regulators, trade bodies, and not-for-profit organisations. But no matter who they are or why they’ve reached out to us, we provide a world-class service every step of the way. And that’s possible thanks to the entrepreneurial spirit and conscientious approach to work that you’ll find across all of our teams. Whichever area of the business you join, you’ll become an integral part an innovative, diverse and ambitious team of people. Clifford Chance is a place where the brightest minds and the best of colleagues meet. The role This role reports to the Head of Information Security and requires a fast-learning and self-motivated individual to add capability and capacity to our small but highly effective team. Information Security is evolving to dynamic business needs, a rapidly changing threat environment, and the firm's own ambitious IT Strategy. This role will help play a key part in implementing and improving the underlying processes required to provide a structured, systematic, and audited approach to Information Security across the firm.

The role will have clear areas of focus combined with periodic involvement in a broad spectrum of information security activities. This is a pivotal role within the Information Security Team. Key responsibilities The key tasks and responsibilities include, but are not limited to, the following: - Conduct thorough Red Team offensive penetration testing on our IT (on prem and cloud) infrastructure to identify vulnerabilities and provide recommendations for remediation. - Perform security assessments on cloud-based applications, ensuring they adhere to industry standards and best practices. - Execute red team exercises to simulate real-world attack scenarios, testing the firm's detection and response capabilities both internal and external. - Assess and test the security of internally deployed infrastructure IoT devices and sensors, identifying potential vulnerabilities and ensuring they are secure. - Assess and test our SmartBuilding digital landscape and data lake. - Assess and test identified web-based APIs and applications for vulnerabilities and recommend where required actions to resolve the vulnerabilities. - Provide guidance to internal teams on API security testing and secure practices, as well as carrying out API security assessments. - Work with wider stakeholders on developing testing models for Generative A. I security. - Work with wider teams to assess the security testing landscape and make sure we reduce vulnerabilities to minimise security incidents where appropriate and practical. - Collaborate with cross-functional teams to implement security measures and enhance the firm's overall security posture. - Prepare detailed reports and presentations on findings, offering actionable insights to both technical and non-technical stakeholders. - Stay informed about the latest security trends, threats, and technologies to proactively address potential risks.