Cyber Security Consultant (UK) - Dionach by Nomios

Dionach by Nomios; Glasgow; Hybrid; GBP 55,000 - 75,000; Full time

Benefits offered by this job

Private health insurance

Eye care plan

Income protection

EAP scheme

Well-being platform

Job summary

Dionach by Nomios is seeking a proactive penetration tester to assess security across web, network, and cloud environments. You will translate findings into actionable guidance for clients and contribute to ongoing security assurance.

The role offers flexible remote work with regular site visits to client locations, plus a hybrid option from our UK offices; you’ll join a team with CREST, CHECK, PCI QSA certifications and strong growth opportunities.

Qualifications

• Minimum two years in penetration testing across networks, web apps and internal assessments.
• Certifications such as CREST CRT/CCT, OSCP/OSWE/OSCE or equivalent.
• Strong written and verbal communication for reports and stakeholders.
• Ability to work independently or in a team and handle client engagements.

Responsibilities

• Conduct penetration tests across web apps, APIs, cloud, and networks.
• Produce detailed reports with risks and remediation recommendations.
• Translate technical findings for technical and non-technical audiences.
• Stay updated on security trends and industry tools.
• Engage in research and certification training.
• Occasional on-site client engagements and on-call duties.

Skills

Penetration testing

English communication

Independent worker

Security clearance eligibility

Tools

Burpsuite Pro

Nessus

Job description

This role offers flexibility to work remotely, with regular visits to client sites. Alternatively, you can choose a hybrid arrangement and work from our offices in Oxford or Glasgow, if preferred and UK based.

Why join Dionach by Nomios?

Since being acquired by Nomios in late 2024, Dionach by Nomios has continued its dynamic growth as a leading information security company. Specializing in penetration testing and information assurance services, we offer an incredible opportunity to be part of an experienced team, build your skills, and grow professionally.

Dionach by Nomios holds impressive certifications, including CREST, CHECK, PCI QSA, and ISO 27001. With our focus on enhancing customers' security and fostering team development, you'll be joining a company that prioritizes both your growth and the safety of our clients.

Dionach is also proud to be Great Place To Work® Certified™, a recognition based entirely on feedback from our team. We’re committed to creating an environment where people feel supported, valued and able to grow. Learn more about our certification here: Working at Dionach | Great Place to Work® UK.

We're in an exciting phase of expansion and are looking for self-motivated individuals ready to thrive in a fun, flexible environment. At Dionach by Nomios, your contributions will have a genuine impact on the business, and you'll find opportunities for both interesting work and career development.

Our employees are the heart of our business. We value our employees and invest in their growth and well-being. Here's what we offer:

• Hybrid Working: Flexibility to work remotely or use our UK offices around client visits.
• Professional Growth: Access to training labs, certification sponsorship, and time for skill development.
• Well-being Focus: Private health insurance, eye care plan, income protection, EAP scheme, and well-being platform.

Contractors will not have these benefits.

Our Commitment to Diversity and Inclusion

At Dionach by Nomios, we believe that diversity fuels innovation. We're dedicated to creating an inclusive workplace where everyone feels valued and respected. We welcome applications from all backgrounds, perspectives, and experiences, and we're committed to being an equal opportunity employer. We do not discriminate based on race, religion, gender, age, disability, or any other legally protected status.

We encourage candidates from underrepresented groups to apply and are committed to providing a supportive and accessible environment for all our employees. If you require accommodations during the application process, let us know, and we'll work to meet your needs.

Screening Requirements

This role requires successful completion of the Baseline Personnel Security Standard (BPSS) screening prior to commencement. BPSS is a government-mandated pre-employment check that includes identity verification, right to work, employment history, and criminal record screening.

Depending on the nature of the work undertaken, additional security clearance at Security Check (SC) level or above may also be required. Candidates must be eligible to work in the UK and willing to undergo the necessary vetting processes.

What You'll Do

• Conduct penetration tests across various environments, including web applications, APIs, Cloud, and network infrastructure.
• Issue detailed reports outlining findings, risks, and recommendations for remediation.
• Translate complex technical findings into actionable insights for both technical and non-technical audiences.
• Stay updated with the latest security trends, tools, and techniques.
• Participate in research and development projects.
• Focus on your development by attaining industry recognised certifications.
• Be available for occasional on-call duties and on-site client engagements, as needed.

What We're Looking For

• Certifications: Relevant certifications such as CREST CRT, CREST CCT, OSCP, OSWE, OSCE, or equivalent level.
• Experience: At least two years in penetration testing, covering network, web, and internal tests and customer engagements.
• Tools: Proficiency with tools like Burpsuite Pro, Nessus, and other industry standards.
• Communication: Strong verbal and written skills for stakeholder management, collaboration and report writing.
• Independence: Ability to work solo or as part of a team on penetration tests.
• Eligibility: Right to work in the UK and eligibility for security clearance.

Key Attributes

• Analytical thinker with a proactive, detail-oriented approach.
• Excellent verbal and written communication skills, capable of engaging with technical and non-technical stakeholders.
• Ability to work effectively under pressure and adapt to rapidly changing threat landscapes.
• Commitment to maintaining the highest ethical and professional standards.