Cyber Security Consultant / Penetration Tester

SATOS Jobs; Thatcham; On-site; GBP 45,000 - 75,000; Full time

Job summary

A&O IT Group is seeking a technically capable Security Consultant to join the security team. You will perform vulnerability assessments, penetration tests and red-team engagements across client environments, translating findings into clear business risk and pragmatic remediation.

Initially in-office for up to 2 months (Maidenhead/Bracknell), then hybrid/remote. You will explain technical issues to diverse audiences and work with engineers, security teams and stakeholders to improve security

Qualifications

• 2+ years in technical cyber security or security consulting.
• Ability to conduct technical security assessments and report findings clearly.
• Strong knowledge of networking, protocols and services.
• Experience with Windows and Linux/Unix environments.
• Experience using scripting or programming to support security testing/automation.

Responsibilities

• Conduct vulnerability assessments and penetration tests across environments.
• Engage in red-team and other technical security engagements.
• Identify, validate and document security vulnerabilities clearly.
• Analyze vulnerabilities for technical impact and risk.
• Produce high-quality reports with remediation recommendations.
• Present findings to technical and non-technical audiences.
• Collaborate with clients to understand environments and concerns.
• Advise on practical security improvements to clients/teams.
• Share knowledge and findings with the security group.
• Keep up with evolving attack techniques and tools.

Skills

Penetration testing

Security consulting

Red-team engagements

Networking

Windows/Linux

Scripting for testing

Client communication

Tools

CRT

OSCP

Job description

Initially full time in the office (Maidenhead/Bracknell) for up to 2 months and then hybrid/remote.

We're looking for a technically capable and curious Security Consultant to join our security team.

You'll deliver technical security assessments across client-facing and internal environments, including vulnerability assessments, penetration testing and red-team engagements. You'll be involved throughout the engagement lifecycle, from understanding the environment and conducting testing through to documenting findings and discussing pragmatic remediation with clients.

You'll work across multiple engagements and industries, giving you exposure to a broad range of technologies, security challenges and organisations.

Just as importantly, you'll be able to explain what you've found.

You'll work directly with engineers, security teams and senior stakeholders, translating technical vulnerabilities into clear business risk and practical recommendations.

We're looking for someone who is technically strong, comfortable working independently and with clients, and keen to continue developing their security expertise.

What you'll be doing

• Conduct vulnerability assessments and penetration testing across a range of environments.
• Participate in red-team and other technical security engagements.
• Identify, validate and clearly document security vulnerabilities.
• Analyse vulnerabilities to understand their technical impact and associated risk.
• Produce high-quality technical reports with clear, actionable remediation recommendations.
• Present and explain findings to both technical and non-technical audiences.
• Work directly with clients to understand their environments, requirements and security concerns.
• Advise clients and internal teams on practical mitigation and security improvements.
• Collaborate with other members of the security team, sharing knowledge, techniques and findings.
• Continue developing your technical knowledge as technologies, vulnerabilities and attack techniques evolve.

What we're looking for

Essential

• Commercial experience of no less than 2 years in technical cyber security, security consulting, penetration testing
• Experience conducting technical security assessments.Excellent understanding of common security vulnerabilities, assessment techniques and methodologies.
• Strong knowledge of networking, protocols and services.
• Working knowledge of Windows and Linux/Unix environments.
• Experience using scripting or programming to support security testing, analysis or automation.
• Ability to investigate complex technical problems and reach well-reasoned conclusions.
• Experience working with customers, clients or stakeholders in a consultative environment.
• Ability to explain technical security issues clearly to audiences with different levels of technical knowledge.
• Strong written English and the ability to produce clear, accurate technical reports.Ability to obtain SC or DV security clearance if required.

Useful experience

We don't expect candidates to have all of the following. Experience in any of these areas would be beneficial:

• CREST qualifications such as CRT, or higher.
• Offensive Security certifications such as OSCP.
• Source-code review and secure development practices.
• Cryptographic technologies or cryptanalysis.

A&O IT Group

As a successful and growing global IT services provider, A&O IT Group deliver 'fully managed' IT solutions and cyber security services. Combining over 50 years expertise, and boasting an extensive global network, whilst remaining privately owned, A&O IT Group is a trusted IT services partner to clients globally.

This role is subject to a post-offer Background Verification in accordance with the local country legislation.

NO AGENCIES

We encourage diversity and seek to attract individuals with unique backgrounds and perspectives. It is important that we build a team with a diverse mix of people and skills, where everyone feels welcome and able to succeed. We are committed to equal employment opportunity regardless of race, colour, religion, sex, sexual orientation, age, marital status, disability or gender identity.