Description

Job Title: Cloud Security & Defense

About the Function: Our Digital and Technology (D&T) team are innovators, delivering ground-breaking solutions that will help build the future of our iconic brands. Technology touches every part of our business, from the sourcing of balanced ingredients to marketing and development of our online platforms. We utilise data insights to build competitive advantage, supporting our people to deliver value faster.

Our D&T team includes some of the most dedicated digital professionals in the industry. Every day, we come together to push boundaries and innovate, crafting the digital solutions of tomorrow. Whatever your passion, we'll help you become the best you can be, crafting career-defining work and delivering breakthrough thinking.

About the role:

Roles in this job family build, develop, implement and coordinates Diageo's information security and cyber resilience strategy by evaluating, testing and monitoring security policies, procedures and systems. They typically have specific skills in IT and cyber security and risk assessment, and well as specialist skills in mitigation and fixes to potential vulnerabilities as detected. These roles will also be involved in continuity planning, containment and restoration of service planning.

Role Responsibilities:

• The Offensive Security Lead, you will own and drive internal offensive security capabilities within AABDS, including internal red teaming, breach and attack simulation (BAS), and controls validation. This role is essential to proactively identifying vulnerabilities, simulating adversarial behavior (including APT tactics), and validating the effectiveness of security controls across IT, Cloud, and OT environments.
• Design, lead, and implement internal offensive security operations including:
• Red teaming (internal adversary simulation)
• Breach and Attack Simulation (BAS)
• Control efficiency validation (e.g., MFA bypass, EDR evasion)
• Develop threat-informed scenarios aligned to MITRE ATT&CK, APT profiles, and business-critical applications
• Build and maintain test cases and automation frameworks for continuous controls validation
• Collaborate with CTI and SOC teams to replay real-world threats and evaluate detection efficacy
• Maintain up-to-date knowledge of zero-day exploits, evasion techniques, and offensive tooling
• Provide technical reports, risk summaries, and executive presentations based on offensive findings
• Participate in post-incident reviews to simulate attacker replay and verify containment efficiency
• Partner with VM, Cloud, and Application Security teams to ensure offensive findings are closed via remediation or compensating controls
• Own and improve internal offensive tooling stack, including safe use of open-source and commercial platforms

Experience / skills required:

• 6+ years in cybersecurity, with 4+ years in offensive security / red teaming / penetration testing
• Hands-on experience with tools such as Cobalt Strike, Metasploit, BloodHound, Caldera, Atomic Red Team, MITRE ATT&CK Navigator, FireCompass, Pentera, or equivalent
• Solid understanding of network security, Windows/AD, cloud environments (Azure/AWS), containers, web application security, and MITRE ATT&CK
• Experience with BAS platforms or custom adversary emulation scripting (Python, PowerShell)
• Strong analytical skills; able to correlate offensive outcomes with real-world business impact
• Familiarity with SOC operations, detection engineering, threat hunting, and CTI workflows
• Excellent communication and reporting skills, including experience addressing senior partners (e.g., CISO, Risk Committees)

Flexible Working Statement: Flexibility is key to our success. From part-time and compressed hours to different locations, our people work flexibly in ways to suit them. Talk to us about what flexibility means to you so that you're supported from day one.

Diversity statement: Our purpose is to celebrate life, every day, everywhere. And creating an inclusive culture, where everyone feels valued and that they can belong, is a crucial part of this.

We embrace diversity in the broadest possible sense. This means that you'll be welcomed and celebrated for who you are just by being you. You'll be part of and help build and champion an inclusive culture that celebrates people of different gender, ethnicity, ability, age, sexual orientation, social class, educational backgrounds, experiences, mindsets, and more.

Our ambition is to create the best performing, most trusted and respected consumer products companies in the world. Join us and help transform our business as we take our brands to the next level and build new ones as part of shaping the next generation of celebrations for consumers around the world.

Feel inspired? Then this may be the opportunity for you.

If you require a reasonable adjustment, please ensure that you capture this information when you submit your application.