Joel Radiven

Senior red team operator with 13+ years in offensive security, currently running Experian's internal red team against its global regulated estate. Full-scope background across Active Directory and Kerberos attacks, C2 infrastructure, AWS and Azure exploitation, social engineering, and physical, RF and hardware attacks, with a recent focus on AI red teaming of LLMs and agentic systems.

Also Product

Owner for Experian's Cyber Risk Discovery capability, turning red team output into repeatable internal products. Looking for senior or principal red team roles in the UAE; previously lived and worked in Dubai.

Senior Security Engineer — Red Team - Experian plc - Remote (Nottingham base)

(2024-03)

FTSE 100 information services company; internal red team across a global regulated estate (UK, US, Brazil, APAC).

• Run full-scope red team and adversary-emulation engagements against production credit-decisioning, identity and fraud systems.
• Product Owner for Cyber Risk Discovery — turned bespoke red team and purple team work into repeatable internal products used by engineering, risk and assurance teams.
• Build and operate OPSEC-safe C2 infrastructure (Cobalt Strike and others) that holds up against modern EDR/XDR and SOC detection.
• Built Experian's AI red team methodology — prompt injection, jailbreak and model-extraction testing of LLMs, agentic systems and AI fraud controls (MITRE ATLAS, OWASP LLM Top 10).
• Compared modern C2 frameworks (Sliver, Mythic, Havoc, Empire) to guide OPSEC-safe tooling choices.
• Work with SOC, IR, threat intel and detection engineering to sharpen detection; report to technical teams and executive risk committees; mentor junior operators.

Penetration Tester (Contract) - University of Leeds - Leeds, UK

(2024-01 - 2024-03)

• Short specialist contract: penetration testing across academic, research and corporate environments, with prioritised remediation reporting.

Red Team / Security Consultant - BlueVoyant - London, UK

(2021-09 - 2024-01)

Managed detection & response, threat intelligence and offensive services firm.

• Delivered red team, adversary simulation and pen testing for enterprise clients in financial services, tech and critical national infrastructure.
• Built bespoke tooling and tradecraft to client threat models; fed findings back into detection engineering and IR.
• Scoped engagements and presented findings at CISO / Head of Security level.

Lead Security Architect - C2 Cyber - London, UK

(2020-08 - 2021-08)

• Led security architecture for enterprise and regulated clients, designing controls against real attacker behaviour rather than checklists.
• Translated offensive insight into pragmatic, defensible design decisions with senior stakeholders.

Red Team / Security Consultant - InteliSecure / Rootshell - Basingstoke, UK

(2019-03 - 2020-08)

• Red team and penetration testing across network, web app, infrastructure and Active Directory.
• Phishing, social engineering and assumed-breach engagements; technical and executive reporting.

Penetration Tester (Contract) - Pentest Partners - Buckinghamshire, UK

(2018-10 - 2019-03)

• Network, web app and infrastructure testing.
• Physical, RF, hardware and IoT assessments, broadening into full-spectrum tradecraft.

Red Team / Security Consultant - QinetiQ - Malvern, UK

(2018-01 - 2018-10)

• Offensive assessments against defence and government environments under vetting.
• Contributed to defence-adjacent offensive methodology; worked to strict discretion and reporting standards.

Security Consultant / Penetration Tester - NCC Group - Manchester, UK

(2015-10 - 2017-12)

FTSE 250 cybersecurity consultancy; one of the UK's foundational offensive practices.

• Three years of high-volume, multi-sector testing: web apps (OWASP Top 10, authz, business logic, APIs), internal/external infrastructure, AD (Kerberos, lateral movement, privilege escalation), mobile, thick-client, wireless and config reviews.
• Earned CREST CPSA and CRT here.
• Built the broad technical base that later specialised into full-scope red team work.

Security Consultant / Penetration Tester - PGI - Bristol, UK

(2015-01 - 2015-10)

• Penetration testing for government and regulated clients in an intelligence-led environment.

Junior Penetration Tester - Portcullis (now Cisco) - UK

(2014-07 - 2014-12)

• Early-career network, web app and AD testing under senior mentorship at a foundational UK offensive team.

Embedded Systems Engineer - Dstl, UK MoD - Porton Down, UK

(2013-10 - 2014-06)

• Applied defence research on embedded systems; grounding in low-level and hardware work that underpinned later hardware and RF attack skills. Vetted environment.

Cyber Reservist - Joint Cyber Unit, Royal Navy (UK MoD) - Portsmouth, UK

(2015-01 - 2019-12)

• Provided offensive and defensive cyber capability alongside civilian work; held DV clearance throughout.

MSc - Radio Imaging and Sensing - University of Manchester (2012)

BSc - Astrophysics & Computer Science - Keele University (2011)