Lead Cyber Security Consultant (CHECK) (UK) - Dionach by Nomios

Nomios Group; Oxford, Glasgow; Hybrid; GBP 80,000 - 110,000; Full time

Benefits offered by this job

Hybrid Working

Certification Sponsorship

Private Health Insurance

Job summary

Dionach by Nomios is seeking a Lead Penetration Tester to drive advanced security testing initiatives. You will lead a skilled team, oversee complex engagements, and serve as the technical lead on CHECK projects.

The role includes onsite client work across the UK and opportunities to shape testing strategies and remediation reporting. The position offers flexibility with remote or hybrid work arrangements, supporting professional growth through training and certifications while contributing to

Qualifications

• Significant experience in penetration testing across network, web app and internal tests.
• Leadership experience with customer engagements on-site.
• Relevant certification: CREST Certified Tester - Infrastructure (CCT INF) or CSTL-INF.
• Eligible to work in the UK and able to obtain security clearance.

Responsibilities

• Lead and mentor a team of penetration testers and foster high performance.
• Oversee complex infrastructure penetration tests per project requirements.
• Lead onsite customer engagements and act as technical authority on CHECK engagements.
• Review and validate team work for accuracy and thoroughness.
• Prepare and deliver comprehensive client reports with findings and remediation strategies.
• Work across services including web/mobile tests, internal tests, infrastructure tests, and social engineering.
• Ensure all testing activities comply with CHECK standards.

Skills

Penetration testing

Team leadership

Client engagements

CHECK/Crest standards

Report writing

Communication

Independence

Analytical thinking

Job description

Location

This role offers flexibility to work remotely from your own home, or as a hybrid arrangement and work from our offices in Oxford or Glasgow, if preferred. There is also a requirement for flexibility from employeesto visit client sites across the UK as part of this role.

Why join Dionach by Nomios?

Since being acquired by Nomios in late 2024, Dionach by Nomios has continued its dynamic growth as a leading information security company. Specializing in penetration testing and information assurance services, we offer an incredible opportunity to be part of an experienced team, build your skills, and grow professionally.

Dionach by Nomios holds impressive certifications, including CREST, CHECK, PCI QSA, and ISO 27001. With our focus on enhancing customers' security and fostering team development, you'll be joining a company that prioritizes both your growth and the safety of our clients.

Dionach is also proud to be Great Place To Work® Certified™ and recognised as one of the UK’s Best Workplaces in Tech™ 2026. This achievement is based entirely on feedback from our team and reflects our commitment to creating an environment where people feel supported, valued and able to grow. Learn more about our certification here: Working at Dionach | Great Place to Work® UK.

We're in an exciting phase of expansion and are looking for self-motivated individuals ready to thrive in a fun, flexible environment. At Dionach by Nomios, your contributions will have a genuine impact on the business, and you'll find opportunities for both interesting work and career development.

Benefits

Our employees are the heart of our business. We value our employees and invest in their growth and well-being. Here's what we offer:

• Hybrid Working: Flexibility to work remotely or use our UK offices around client visits.

• Professional Growth: Access to training labs, certification sponsorship, and time for skill development.

• Well-being Focus: Private health insurance, eye care plan, income protection, EAP scheme, and well-being platform.

Our Commitment to Diversity and Inclusion

At Dionach by Nomios, we believe that diversity fuels innovation. We’re dedicated to creating an inclusive workplace where everyone feels valued and respected. We welcome applications from all backgrounds, perspectives, and experiences, and we’re committed to being an equal opportunity employer. We do not discriminate based on race, religion, gender, age, disability, or any other legally protected status.

We encourage candidates from underrepresented groups to apply and are committed to providing a supportive and accessible environment for all our employees. If you require accommodations during the application process, let us know, and we’ll work to meet your needs.

Screening Requirements

This role requires successful completion of the Baseline Personnel Security Standard (BPSS) screening prior to commencement. BPSS is a government-mandated pre-employment check that includes identity verification, right to work, employment history, and criminal record screening.

Depending on the nature of the work undertaken, additional security clearance at Security Check (SC) level or above may also be required. Candidates must be eligible to work in the UK and willing to undergo the necessary vetting processes.

Please note that Dionach does not hold a sponsor licence and is therefore unable to provide visa sponsorship for this role. Applicants must have and maintain the right to work in the UK without sponsorship throughout employment with Dionach.

What You’ll Do

• Lead and mentor a team of Penetration testers, fostering a collaborative and high-performance work environment.

• Lead and oversee complex infrastructure penetration tests ensuring that they are conducted thoroughly and in accordance with project requirement.

• Leading onsite customer engagements and serving as the technical authority on CHECK engagements.

• Review and validate the work of team members to ensure accuracy and thoroughness.

• Prepare and deliver comprehensive reports detailing findings, risks, and recommended remediation strategies to clients, including assisting with proposal writing and scoping.

• You will have the opportunity to work on a wide range of services: web and mobile application tests, internal tests, infrastructure tests, but also social engineering.

• Ensure all testing activities comply with CHECK standards.

What We’re Looking For

• Experience: Significant experience in penetration testing, including network, web application and internal penetration testing as well as experience of leading customer engagements on-site.

• Communication: Strong verbal and written skills for stakeholder management, collaboration and administration duties

• Independence: Ability to work independently or as part of a team

• Certifications: Holding a relevant certification: CREST Certified Tester - Infrastructure (CCT INF) or Cyber Scheme Team Leader infrastructure (CSTL-INF).

• Eligibility: Right to work in the UK and eligibility for security clearance.

Key Attributes

• Analytical thinker with a proactive, detail-oriented approach.

• Excellent verbal and written communication skills

• Ability to work effectively under pressure

• Commitment to maintaining the highest ethical and professional standards.

• Prior experience leading a Penetration testing team.

Are you an experienced Lead Penetration Tester looking to further improve your skills and take on more responsibilities? If so, this opportunity is perfect for you!