
5001 - 10000 employees
⚖️ Legal
💼 Consulting
Legal • Consulting
Clifford Chance is one of the world's largest law firms, with a significant presence across five continents. As a fully integrated global partnership, the firm emphasizes an approachable and team-based working style. It serves a diverse clientele, including corporations, governments, and non-profit organizations, providing high-quality legal advice in areas such as Corporate and M&A, Banking and Finance, Real Estate, Litigation, and Risk Management. The firm combines global standards with local expertise to address complex business issues and deliver legal insight.
🔥 28 minutes ago
🇬🇧 United Kingdom – Remote
⏰ Full Time
🟡 Mid-level
🟠 Senior
👮♂️ Cybersecurity / Security Engineer
🇬🇧 UK Skilled Worker Visa Sponsor
👻 Ghost score 15%
Where this job comes from
Posted on Clifford Chance's careers page, not through a job board
First seen by Remote Rocketship 28 minutes ago
Still open on Clifford Chance's site. Checked 1 minute ago.

5001 - 10000 employees
⚖️ Legal
💼 Consulting
Legal • Consulting
Clifford Chance is one of the world's largest law firms, with a significant presence across five continents. As a fully integrated global partnership, the firm emphasizes an approachable and team-based working style. It serves a diverse clientele, including corporations, governments, and non-profit organizations, providing high-quality legal advice in areas such as Corporate and M&A, Banking and Finance, Real Estate, Litigation, and Risk Management. The firm combines global standards with local expertise to address complex business issues and deliver legal insight.
• Report to the Head of Information Security • Conduct thorough red team offensive penetration testing on on-premises and cloud IT infrastructure • Identify vulnerabilities and provide remediation recommendations • Perform security assessments on cloud-based applications • Execute red team exercises simulating real-world attack scenarios • Test internal and external detection and response capabilities • Assess and test internally deployed infrastructure IoT devices and sensors • Assess and test the SmartBuilding digital landscape and data lake • Assess and test web-based APIs and applications for vulnerabilities • Provide guidance on API security testing and secure practices • Develop testing models for Generative AI security with wider stakeholders • Assess the security testing landscape and reduce vulnerabilities to minimise security incidents • Collaborate with cross-functional teams to enhance the firm’s security posture • Prepare detailed reports and presentations for technical and non-technical stakeholders • Stay informed about security trends, threats, and technologies • Assist in developing and maintaining security policies, procedures, and guidelines • Serve as key point of contact for security testing engagements • Enhance efficiencies and maintain compliance with client and external audit requirements • Use data and stakeholder feedback to drive continuous improvements in security testing • Support colleagues in becoming informed security contacts and resolving security issues • Research security policies, standards, and resources to identify training and guidance needs • Participate in evaluating, selecting, and implementing security testing technologies • Support ISO27001, SOC2, and Cyber Essentials Plus certification activities • Engage with security industry groups and external industry partners
• Comprehensive experience and knowledge in security testing and red teaming • Background in information security • Ability to conduct a wide range of security testing and red teaming activities • Ability to provide security advice and guidance to the business • Experience coordinating external security requirements • Ability to identify areas for continuous improvement in security services • Strong background in delivering actionable results • Ability to quickly assimilate information to assess and document risks • Ability to engage with individuals at various levels of seniority • Ability to align Information Security with business objectives and clients’ information assurance needs • Organised approach to managing and prioritising multiple concurrent assignments • Degree-level education likely but not essential • CREST/CHECK/OSCP/OSWE/OSWA status highly advantageous • Various qualifications or full membership status with the IISP highly advantageous • Ability to maintain good working relations with external clients • Experience developing and using structured documentation, including process, format, logical content, and version control • May be required to obtain security clearance in the future
• Varied opportunities for continuous growth and development of skills and knowledge • Formal training • Informal coaching and mentoring • Skills-based and technical training • On-the-job learning • Broad range of financial, wellbeing, lifestyle, and family-friendly benefits • Hybrid working with mostly remote work and office attendance as business needs require • Employee networks and inclusive culture
Apply NowImprove your chances of getting an interview by checking your resume score before you apply.
🕒 August 6
AI Security Consultant helping PA Consulting clients secure LLMs, agentic systems and cloud environments. Designing practical controls, threat models and responsible AI-enabled security operations.