Contract: Full-time, Permanent
Location: Remote
We’re working with a specialist cyber security consultancy delivering security services to organisations operating within critical national infrastructure. They’re looking for a technically versatile Cyber Security Consultant who enjoys getting hands‑on with technology, solving complex security challenges and working directly with clients. This is a varied role combining technical implementation, security assessments and consultancy, giving you the opportunity to turn identified risks into practical, effective solutions.
You’ll work across a range of environments and technologies, helping clients strengthen their security posture while contributing to the development of internal tools, methodologies and technical capabilities.
Key Responsibilities:
- Design, implement and configure security solutions across networks, endpoints, cloud platforms and identity environments.
- Support penetration testing, vulnerability assessments and technical security reviews across infrastructure, applications and cloud environments.
- Translate technical findings into clear remediation plans and support clients with implementing improvements.
- Develop scripts, automation and tooling to improve security processes and delivery.
- Apply security hardening principles in line with recognised standards and guidance, including CIS Benchmarks, NCSC recommendations and ISO 27001.
- Work directly with clients at all levels, communicating technical risks and recommendations in an accessible, business‑focused way.
- Produce high-quality technical reports, security documentation and remediation guidance.
- Support client workshops, project scoping, presentations and technical proposals.
- Collaborate with colleagues, share technical knowledge and contribute to research and the development of security methodologies.
- Maintain awareness of emerging threats, vulnerabilities and developments in cyber security.
- A degree in Computer Science or a closely related discipline, ideally at 2:1 level or above.
- At least two years’ professional experience in cyber security, infrastructure, systems engineering or a similar technical role.
- Strong networking knowledge, including TCP/IP, routing, firewalls and VPNs.
- Experience administering Windows and Linux environments, Active Directory and identity technologies.
- Familiarity with at least one major cloud platform: AWS, Azure or GCP.
- Practical experience implementing and configuring technical security solutions, rather than working solely in an assessment or advisory capacity.
- Scripting experience with Python, PowerShell, Bash or a similar language.
- Strong written and verbal communication skills, with the ability to engage technical teams and senior stakeholders.
- An adaptable approach, with the ability to learn new technologies quickly and work across varied projects.
- Eligibility to work in the UK and willingness to undergo security clearance at SC level or above.
- Relevant certifications such as OSCP, CREST CPSA/CRT, CompTIA Security+, CISSP, AZ-500 or AWS Security Specialty.
- Familiarity with offensive security tools, including Burp Suite, Nmap, Metasploit, BloodHound or Cobalt Strike.
- Knowledge of security frameworks such as MITRE ATT&CK, NIST CSF, NCSC CAF and ISO 27001.
- Experience with infrastructure as code, DevSecOps, Terraform, Ansible or CI/CD pipelines.
- An interest in using AI and automation to improve security delivery.