Cyber Security Consultant

Investigo; England; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A leading cybersecurity firm is seeking a Cyber Security Consultant to work with government and national security clients. You'll provide security expertise, assess risks, and design secure architectures. This hybrid role requires around 5 years of experience in complex cyber environments and strong communication skills. The position offers opportunities for career development and the ability to see the impact of your work in critical national projects.

Benefits

Structured career development

Support for recognized certifications

Mentoring and regular reviews

Qualifications

• Around 5 years working in complex ICT or cyber environments.
• Solid understanding of enterprise ICT and cyber infrastructure.
• Ability to present and justify conclusions effectively.

Responsibilities

• Provide security expertise on major system procurements.
• Identify and analyze risks across critical projects.
• Write risk and assurance documentation.

Skills

Communication skills

Risk analysis

Security expertise

Technical complexity comprehension

Client interaction

Tools

SIEMs

Identity management systems

Endpoint protection platforms

Job description

Cyber Security Consultant (must be SC minimum or be eligible for it)

Hybrid (mostly remote, occasional site visits in London and beyond)

You’ve probably read a hundred cyber job ads that sound like they were written by a committee.

Their job is to help them protect their digital environments from the threats that never stop evolving.

If you’re someone who actually enjoys thinking as much as doing – who gets a kick out of solving complex cyber problems that matter – you’ll fit right in.

What You’ll Actually Do

You’ll be working with some of the most interesting (and occasionally challenging) clients in government, policing, and national security. Some days you’ll be designing secure architectures; others you’ll be explaining risk in plain English to senior decision‑makers who think “patching” is something done with a needle and thread.

You might be :

• Providing security expertise on major system procurements or Agile programmes.
• Identifying and analysing risks across projects that are critical to national operations.
• Turning technical complexity into something non‑technical people can actually understand.
• Writing risk and assurance documentation that people will actually use, not file away and forget.
• Shaping new architectures that keep pace with how fast technology – and the bad guys – move.
• Leading assignments or mentoring others if that’s where your experience sits.

No two projects are the same. Your role depends on what you’re good at and what needs doing.

What You’ll Need

Let’s be clear: this isn’t a junior role. You’ll need to bring experience and some scars.

Ideally :

• Around 5 years working in complex ICT or cyber environments – in law enforcement, national security or other parts of the public sector.
• A solid understanding of enterprise ICT and cyber infrastructure – networks, applications, data, the lot.
• The ability to present and justify your conclusions to people who may outrank you but know less about cyber than you do.
• Strong communication skills, because if you can’t explain it, you probably don’t understand it.
• A track record of delivering security outcomes in real‑world, high‑stakes environments.

Bonus points if you know your way around :

• HMG SPF, ISO27001, NCSC guidance, or similar frameworks.
• Security architecture models like TOGAF or SABSA.
• Technical risk assessments, threat modelling, or assurance work.
• Tools like SIEMs, identity management systems, or endpoint protection platforms.

If you’ve worked on systems that can’t afford to fail – or that you can’t talk about in detail – we’ll probably get along fine.

The Kind of Person Who’ll Do Well Here

You’re curious. You’re pragmatic. You’re allergic to waffle.

You think before you speak, but when you do, people listen.

You’re not fazed by ambiguity, deadlines, or acronyms.

The Small Print (That’s Actually Important)

• You’ll need to be eligible and willing to obtain UK Government Security Clearance (SC or DV).
• It’s a hybrid role – mostly remote, with some travel to client sites (mainly around London).
• You’ll get structured career development with mentoring, regular reviews, and support for recognised certifications like CISSP, ISO27001 Lead Auditor, SABSA, TOGAF, and more.

Why This Role?

Because you’ll actually get to see the impact of your work.

You’ll contribute to projects that keep the country running – and sleeping – safely.

You’ll be trusted, challenged, and developed.

And you’ll do it with smart people who take cyber security seriously, but not themselves.

Sound like you?

Then let’s talk.

Hit “apply” and tell us what makes you the right kind of different.