Vulnerability Consultant

NCC Group; Greater London; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

A leading global cybersecurity company is seeking a Vulnerability Consultant to assess organizations against the Cyber Essentials framework. The ideal candidate will have proven experience and a collaborative approach to enhance clients' cybersecurity posture. Responsibilities include conducting comprehensive assessments, collaborating with clients, and mentoring junior consultants. This role offers opportunities for learning and development in a supportive work environment, as well as competitive benefits and flexible working arrangements.

Benefits

Flexible working

Pension

Life Assurance

Employee Referral Program

Employee Referral Program

Qualifications

• Proven experience as a Cyber Essentials Assessor or similar role.
• In-depth knowledge of the Cyber Essentials framework and principles.
• Strong analytical and problem-solving skills.
• Excellent communication and interpersonal skills.
• Proactive, creative, and solution-oriented mindset.

Responsibilities

• Conduct comprehensive assessments against the Cyber Essentials framework.
• Provide tailored recommendations based on clients' cybersecurity needs.
• Prepare detailed assessment reports and present findings to clients.
• Collaborate with internal teams for seamless project delivery.
• Stay up to date with cybersecurity trends.

Skills

Cyber Essentials framework knowledge

Analytical skills

Problem-solving skills

Communication skills

Team collaboration

Customer handling skills

Education

Cyber Essentials Assessor certification

CISM/CISSP certifications

Tools

Nexpose Rapid 7

Qualys

HP WebInspect

IBM AppScan

Tenable Nessus

Burp

NMAP

Job description

Vulnerability Consultant

Manchester, Cheltenham or London

We are a leading global cybersecurity company dedicated to helping organizations protect their digital assets and ensure compliance with industry standards. Our team is passionate about innovation, collaboration, and delivering exceptional results for our clients.

We are seeking an experienced Cyber Essentials Assessor to join our dynamic team. The ideal candidate will have a strong background in cybersecurity, excellent team‑working skills, and a proactive, creative approach to problem‑solving. This role involves assessing organizations against the Cyber Essentials framework, providing expert guidance, and working closely with clients to enhance their cybersecurity posture.

This is an opportunity to join a technically advanced and talented team and help NCC Group to continue to deliver customer‑centric assessments and advice for our Cyber Essentials services to our customers.

Your expertise in Cyber Essentials assessments, collaborative and proactive approach, and a customer‑centric approach will be crucial in driving customer satisfaction, team success, and business growth.

Key Responsibilities

This is an opportunity to work in a fun and challenging environment, using market‑leading security testing tools and platforms to provide security testing services to our large client base. You will play a key role in delivering and managing Cyber Essentials security programmes all year round, as well as building relationships with clients and ensuring that our services meet their needs. You will also have the responsibility of working with other vulnerability consultants to support the direction and development of the service.

• Conduct comprehensive assessments of the range of size and complexity of client organisations against the Cyber Essentials framework.
• Collaborate with clients to understand their cybersecurity needs and provide tailored recommendations.
• Prepare detailed assessment reports and present findings to clients.
• Work closely with internal teams to ensure seamless project delivery.
• Stay up to date with the latest cybersecurity trends and best practices.
• Contribute to the development of innovative assessment methodologies and tools.
• Build support and trust with all customers.
• Running and manually verifying network and application vulnerability scans
• Analysis of external and internal outputs, to identify and communicate non‑compliance.
• Work directly with customers to provide prioritisation for remediation.
• Providing support and answering queries from clients
• Own the operational relationships with your customers.
• Assist the operational teams in fixing issues that arise during the operation of services.
• Act as the SME to customers to improve the quality of service they are receiving and maintain a roadmap for those customers.
• Mentor more junior consultants, providing guidance and support in delivering exceptional service to our clients.
• Foster a collaborative and positive team culture, promoting knowledge sharing and continuous improvement.
• Work with the Departmental Leadership team, as a SME, to ensure success.

What we are looking for in you

Technical Skills & Knowledge

• Proven experience as a Cyber Essentials Assessor or similar role.
• In‑depth knowledge of the Cyber Essentials framework and cybersecurity principles.
• Strong analytical and problem‑solving skills.
• Excellent communication and interpersonal skills.
• Ability to work effectively both independently and as part of a team.
• Proactive, creative, and solution‑oriented mindset.
• Relevant certifications (e.g., Cyber Essentials Assessor, VA+, CPSA or CRT). CISM/CISSP are a plus.
• Excellent understanding of basic cyber security principles
• Good understanding and exposure to network and web application security
• Good experience using network and application scanning tools and utilities, such as Nexpose Rapid 7, Qualys, HP WebInspect, IBM AppScan, Tenable Nessus, Burp, NMAP etc.
• Strong interpersonal and communication skills
• Ability to work and manage time and tasks independently.
• Ability to communicate with customers in a clear and concise manner.
• Strong customer handling skills
• Good consultancy skills

Values

• Team Working: Ability to collaborate effectively with colleagues and clients to achieve common goals.
• Collaboration: Strong emphasis on working together to share knowledge and achieve the best outcomes.
• Proactive: Taking initiative to identify and address potential issues before they become problems.
• Creative: Bringing innovative ideas and approaches to enhance assessment processes and client solutions.

Ways of Working

Focusing on Clients and Customers.

Working as One NCC.

Always Learning.

Being Inclusive and Respectful.

Delivering Brilliantly.

Our Company

At NCC Group, our mission is to create a more secure digital future. That mission underpins everything we do, from our work with our incredible clients to groundbreaking research shaping our industry. Our teams' partner with clients across a multitude of industries, delving into, securing new products, and emerging technologies, as well as solving complex security problems. As global leaders in cyber and escrow, NCC Group is a people‑powered business seeking the next group of brilliant minds to join our ranks.

Our colleagues are our greatest assets, and NCC Group is committed to providing an inclusive and supportive work environment that fosters creativity, collaboration, authenticity, and accountability. We want colleagues to put down roots at NCC Group, and we offer a comprehensive benefits package, as well as opportunities for learning and development and career growth. We believe our people are at their brilliant best when they feel bolstered in all aspects of their well‑being, and we offer wellness programs and flexible working arrangements to provide that vital support.

Come join us?

What do we offer in return?

We have a high‑performance culture which is balanced evenly with world‑class well‑being initiatives and benefits:

⏰ Flexible working

?? Financial & Investment

Pension

Life Assurance

Share Save Scheme

Maternity & Paternity leave

?? Community & Volunteering Programmes

⚡ Green Car Scheme

?? Cycle Scheme

????? Employee Referral Program

?? Lifestyle & Wellness

?? Learning & Development

??? Diversity & Inclusion

So, what’s next?

If this sounds like the right opportunity for you, then we would love to hear from you! Click on apply to this job to send us your CV and cover letter and the relevant member of our global talent team will be in touch with you. Alternatively send your details to [e-mail].

About your application

We review every application received and will get in touch if your skills and experience match what we’re looking for. If you don’t hear back from us within 10 days, please don’t be too disappointed – we may keep your CV on our database for any future vacancies and we would encourage you to keep an eye on our career opportunities as there may be other suitable roles.

If you do not want us to retain your details, please email [e-mail]. All personal data is held in accordance with the NCC Group Privacy Policy (candidate‑privacy‑notice‑261023.pdf (nccgroupplc.com)). We are committed to diversity and flexibility in the workplace. If you require any reasonable adjustments to support you during the application process, please tell us at any stage.

Please note that this role involves mandatory pre‑employment background checks due to the nature of the work NCC Group does. To apply, you must be willing and able to undergo the vetting process. This role being advertised will be subject to BS7858 screening as a mandatory requirement.