Cyber Security Consultant / Penetration Tester

A&O IT Group; Thatcham; Hybrid; GBP 55.000 - 75.000; Vollzeit

Zusammenfassung

A&O IT Group is seeking a Security Consultant to apply strong technical and analytical skills to enterprise security work, including vulnerability analysis, penetration testing, and red team engagements for client-facing and internal environments.

You will collaborate with the Corsaire security team and clients to advise on mitigation of flaws and to implement state-of-the-art security mechanisms, while developing your ability to communicate complex issues to business and technology audiences.

Qualifikationen

• Minimum of 3 years of commercial experience in a similar role.
• Has worked in a client-facing consultative environment (internal or external).
• Strong project management and prioritisation skills.
• Knowledge of security assessment tools, techniques and methodologies.
• Good knowledge of network protocols and services.
• Working knowledge of Windows and POSIX operating systems.
• Programming or scripting experience.
• Familiarity with standard Office.
• Understanding of cryptographic concepts.
• Able to absorb complex technical information and communicate to technical and business audiences.
• Strong written English for client communications and reporting.
• Able to gain SC or DV clearance if required.

Aufgaben

• Conduct security assessments (vulnerability analysis, penetration testing, red team engagements) for client-facing and internal environments.
• Create detailed technical reports and communicate findings to clients and stakeholders.
• Collaborate with security teams and clients to mitigate flaws and implement security mechanisms.
• Engage with executives to engineers to convey complex technical issues clearly.

Kenntnisse

Client-facing

Security assessments

Network protocols

Windows/POSIX

Programming/scripting

Communication

Ausbildung

Bachelor's degree in a technical field

Jobbeschreibung

Hybrid working 3 day's in the office, initially this will be in Bracknell and then moving to Maidenhead towards the end of this year.

As Security Consultant (SC) you will use your existing strong technical and analytical skills to develop a strategic and pragmatic view of enterprise security as well as conduct detailed security assessments (vulnerability analysis, penetration testing, red team engagements) for both client-facing and internal environments, including the creation of technical reports. Working on multiple projects provides exposure to different industries.

You'll be collaborating with members of the Corsaire security team and directly with the clients to provide advice on the mitigation of discovered flaws or implementing state-of-the-art security mechanisms.

Through exposure to clients and peers from executives through senior management to engineers and technical practitioners, you will further develop your existing proficiency in written and oral communication skills and ability to articulate complex technical issues to business and technology contacts alike.

They must be proficient with supporting multiple stakeholders and providing quick responses and timely follow up to their needs and inquiries. The SC must be a quick learner and have the natural ability to think on their feet in high-pressure situations, providing technical details and acting as an industry subject matter expert.

ESSENTIAL SKILLS & QUALIFICATIONS

• Minimum of 3 years of commercial experience in a similar role.
• Has worked in a client-facing consultative environment (either with internal or external customers).
• Strong project management and prioritisation skills with the ability to manage your workload.
• Knowledge of security assessment and audit tools, techniques and methodologies.
• Good knowledge of network protocols and services.
• Working knowledge of Windows and POSIX-based operating systems.
• Programming or scripting experience.
• Familiarity with standard Office.
• Understanding of cryptographic concepts and technologies.
• Strong project management and prioritisation skills.
• Able to absorb complex technical information and communicate effectively to different levels of technical and business audiences.
• Strong written English required for client communications and technical reporting.
• Able to gain SC or DV (Security Clearance) if required.

DESIRABLE

• CREST CRT or higher CREST qualification.
• Scientific, Engineering or Technical Bachelor’s Degree or equivalent.
• Offensive Security OSCP certification.
• Post-graduate study or qualification in a related discipline.
• Detailed cryptanalysis or cryptographic experience.
• Experience with non-IP protocols.
• Experience with enterprise operating systems and platforms (iSeries, Solaris, VMWare ESX).
• Experience with source code review and QA.
• Understanding the needs, objectives and constraints of those in other disciplines and functions.

A&O IT Group

As a successful and growing global IT services provider, A&O IT Group deliver ‘fully managed’ IT solutions and cyber security services. Combining over 50 years expertise, and boasting an extensive global network, whilst remaining privately owned, A&O IT Group is a trusted IT services partner to clients globally.

This role is subject to a post-offer Background Verification in accordance with the local country legislation.

We encourage diversity and seek to attract individuals with unique backgrounds and perspectives. It is important that we build a team with a diverse mix of people and skills, where everyone feels welcome and able to succeed. We are committed to equal employment opportunity regardless of race, colour, religion, sex, sexual orientation, age, marital status, disability or gender identity.