Cyber Security Consultant / Penetration Tester

A&O IT Group; Maidenhead; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

A&O IT Group in Maidenhead / Bracknell area is seeking a technically capable Security Consultant to join the security team. You will lead security assessments, including vulnerability tests and red-team engagements, and translate findings into business-focused remediation.

Ideal candidates have 2+ years in technical cyber security, strong networking knowledge, and the ability to explain complex issues to clients. The role starts in-office with a transition to hybrid/remote work.

Qualifications

• Minimum 2 years in technical cyber security or security consulting.
• Experience with vulnerability assessments and penetration testing.
• Strong knowledge of networking, Windows and Linux/Unix environments.
• Ability to explain technical security issues clearly to non-technical audiences.

Responsibilities

• Conduct vulnerability assessments and penetration testing across client and internal environments.
• Participate in red-team and other technical security engagements.
• Identify, validate and document security vulnerabilities clearly.
• Analyse vulnerabilities to understand technical impact and risk.
• Produce high-quality technical reports with actionable remediation recommendations.
• Present findings to technical and non-technical audiences.
• Work with clients to understand environments, requirements and security concerns.
• Advise on practical mitigation and security improvements.
• Collaborate with security team and share knowledge and findings.
• Keep developing technical knowledge as threats evolve.

Skills

Security consulting

Penetration testing

Vulnerability assessment

Networking knowledge

Windows

Linux/Unix

Scripting

Client communication

Report writing

Job description

Initially full time in the office (Maidenhead/Bracknell) for up to 2 months and then hybrid/remote.

We’re looking for a technically capable and curious Security Consultant to join our security team.

You'll deliver technical security assessments across client-facing and internal environments, including vulnerability assessments, penetration testing and red-team engagements. You'll be involved throughout the engagement lifecycle, from understanding the environment and conducting testing through to documenting findings and discussing pragmatic remediation with clients.

You'll work across multiple engagements and industries, giving you exposure to a broad range of technologies, security challenges and organisations.

Just as importantly, you'll be able to explain what you've found.

You'll work directly with engineers, security teams and senior stakeholders, translating technical vulnerabilities into clear business risk and practical recommendations.

We're looking for someone who is technically strong, comfortable working independently and with clients, and keen to continue developing their security expertise.

What You'll Be Doing

• Conduct vulnerability assessments and penetration testing across a range of environments.
• Participate in red-team and other technical security engagements.
• Identify, validate and clearly document security vulnerabilities.
• Analyse vulnerabilities to understand their technical impact and associated risk.
• Produce high-quality technical reports with clear, actionable remediation recommendations.
• Present and explain findings to both technical and non-technical audiences.
• Work directly with clients to understand their environments, requirements and security concerns.
• Advise clients and internal teams on practical mitigation and security improvements.
• Collaborate with other members of the security team, sharing knowledge, techniques and findings.
• Continue developing your technical knowledge as technologies, vulnerabilities and attack techniques evolve.

What we’re looking for

Essential

• Commercial experience of no less than 2 years in technical cyber security, security consulting, penetration testing
• Experience conducting technical security assessments.Excellent understanding of common security vulnerabilities, assessment techniques and methodologies.
• Strong knowledge of networking, protocols and services.
• Working knowledge of Windows and Linux/Unix environments.
• Experience using scripting or programming to support security testing, analysis or automation.
• Ability to investigate complex technical problems and reach well-reasoned conclusions.
• Experience working with customers, clients or stakeholders in a consultative environment.
• Ability to explain technical security issues clearly to audiences with different levels of technical knowledge.
• Strong written English and the ability to produce clear, accurate technical reports.Ability to obtain SC or DV security clearance if required.

Useful experience

We don't expect candidates to have all of the following. Experience in any of these areas would be beneficial:

• CREST qualifications such as CRT, or higher.
• Offensive Security certifications such as OSCP.
• Source-code review and secure development practices.
• Cryptographic technologies or cryptanalysis.

A&O IT Group

As a successful and growing global IT services provider, A&O IT Group deliver ‘fully managed’ IT solutions and cyber security services. Combining over 50 years expertise, and boasting an extensive global network, whilst remaining privately owned, A&O IT Group is a trusted IT services partner to clients globally.

This role is subject to a post-offer Background Verification in accordance with the local country legislation.

NO AGENCIES

We encourage diversity and seek to attract individuals with unique backgrounds and perspectives. It is important that we build a team with a diverse mix of people and skills, where everyone feels welcome and able to succeed. We are committed to equal employment opportunity regardless of race, colour, religion, sex, sexual orientation, age, marital status, disability or gender identity.