Cyber Security Consultant

Ndaba; England; On-site; GBP 30,000 - 45,000; Full time

Job summary

A dynamic managed service provider in Melton Mowbray is looking for a Cyber Security Consultant specializing in Penetration Testing. This role focuses on delivering high-quality security assessments and helping clients improve their security posture through hands-on technical work. The ideal candidate will have proven experience in penetration testing and a solid understanding of security compliance frameworks. Competitive remuneration and a supportive work environment are offered, along with the opportunity for career advancement.

Benefits

Competitive salary and annual performance bonus

Training budget and certification support

Flexible working and wellbeing support

Qualifications

• Proven experience delivering penetration tests in commercial or consultancy settings.
• Strong understanding of OWASP Top 10 and common exploitation techniques.
• Hands-on ability with common security testing tools.

Responsibilities

• Deliver CREST-aligned penetration tests across various environments.
• Conduct Cyber Essentials readiness reviews and audits.
• Produce high-quality technical reports and present findings.

Skills

Penetration testing

Report writing

Vulnerability assessments

Network protocols

Compliance testing

Tools

Burp Suite

Nmap

Metasploit

Nessus

Wireshark

Job description

Cyber Security Consultant

£30,000 £45,000 per annum

Melton Mowbray

Role Summary

We re a growing MSP based in Melton Mowbray, helping organisations of all sizes strengthen their security posture and achieve recognised certifications. We re looking for a skilled Cyber Security Consultant specialising in Penetration Testing to deliver high-quality security testing and assurance across a diverse client base. You ll lead and support security assessments including network, web application, mobile, cloud, wireless, and internal infrastructure testing, alongside Cyber Essentials and Cyber Essentials Plus (CE/CE+) assessments.

This role suits someone who enjoys hands-on technical work, clear reporting, and helping clients improve their security posture in practical, measurable ways. This is primarily an office-based role that will require occasional travel to client sites.

Key Responsibilities

Penetration Testing and Security Assessments:

• Deliver CREST-aligned penetration tests across external and internal networks, web applications and APIs, mobile applications (iOS/Android), and Cloud environments (Azure, AWS, GCP).
• Wireless networks and remote working setups.
• Security configuration and segmentation reviews.
• Perform vulnerability assessments and risk-based testing using industry best practices.
• Validate findings, reproduce issues, and advise on realistic remediation.
• Support red team / adversarial simulation exercises where appropriate.

Cyber Essentials and Cyber Essentials Plus:

• Conduct Cyber Essentials readiness reviews, gap assessments, and remediation guidance.
• Lead Cyber Essentials Plus technical audits, including sampling, evidence review, and on-site/remote verification.
• Help clients interpret requirements and maintain compliance across re-certification cycles.
• Ensure assessments are completed to scheme standards and timelines.

Reporting and Client Engagement:

• Produce clear, high-quality technical reports with actionable remediation advice.
• Present findings to technical and non-technical stakeholders.
• Provide pragmatic risk prioritisation and security improvement roadmaps.
• Contribute to scoping calls, statements of work, and test planning.

Continuous Improvement:

• Maintain current knowledge of security threats, tooling, and testing methodologies.
• Contribute to internal playbooks, checklists, and training materials.
• Support junior consultants through mentoring and peer review.

Essential Skills and Experience:

• Proven experience delivering penetration tests in commercial or consultancy settings.
• Strong understanding of OWASP Top 10 / ASVS, common exploitation techniques and mitigations, network protocols, Active Directory, and Windows/Linux environments, and cloud security fundamentals.
• Hands‑on ability with common tools such as Burp Suite, Nmap, Metasploit, Nessus/Qualys, Wireshark, BloodHound, etc.
• Confident communicator with excellent report‑writing skills.
• Solid grasp of compliance‑driven security testing (esp. Cyber Essentials/CE+).
• Full UK Driving Licence.

Desirable Skills and Certifications:

• CREST CRT/CCRT/CCT or CHECK Team Member.
• OSCP / OSWE / OSEP / GPEN / eCPPT / similar.
• Experience with secure code review, SAST/DAST pipelines, or DevSecOps.
• Familiarity with ISO 27001 or wider GRC frameworks.

What We Offer:

• Competitive salary and annual performance bonus.
• Training budget and certification support.
• Clear progression path into Senior/Lead Consultant roles.
• Flexible working and wellbeing support.
• Exposure to varied, interesting client environments and modern tech stacks.
• Collaborative team culture focused on quality and continuous learning.