Senior Technical Consultant UK based
Company Description
We are looking for an experienced UK based Senior Security Consultant to strengthen the consulting team at this well established security consultancy.
Role Description
This is a full-time, on-site role based in Portsmouth and potential work-from home for a Cyber Security Consultant. The consultant will conduct vulnerability assessments, application security reviews, and network security analyses. Responsibilities include evaluating risks, providing actionable security recommendations, and assisting clients with compliance to established standards like ISO 27001 and PCI DSS. The role will involve working closely with clients across sectors to strengthen their overall security posture through proactive planning and solutions.
Qualifications
* Experience in Cybersecurity, including identifying and addressing security threats and challenges
* Knowledge of Application Security, with the ability to identify vulnerabilities in web and mobile applications
* Skills in Network Security, including securing and evaluating infrastructure and cloud environments
* Expertise in performing Vulnerability Assessments and delivering actionable insights
* Background in Information Security, with experience in regulatory compliance (e.g., PCI DSS, ISO 27001)
* Strong analytical skills and the ability to effectively communicate complex technical concepts
* Relevant certifications (e.g., CREST, CISSP, CEH, or similar) are a plus
* Bachelor's degree in Cybersecurity, Computer Science, or related field is preferred
The successful candidate will have demonstrable knowledge and experience of penetration testing, preferably supported by industry leading qualifications. In addition they will have:
SPECIALITIES
• Web Application Security (Implementation, detection, mitigation and education)
• Penetration Testing and Vulnerability Assessment (Network, SCADA and Web Application)
• Mobile phone / Application Penetration Testing (Android / iPhone / iPad)
• Computer and Network Forensics (including e-Discovery)
• Delivery of Enterprise Wide Security Programs
• Operational Security (Incident Response)
• Infrastructure Security and Risk assessments
• Network Security (border control devices)
• Social Engineering
• Good client facing skills.
• Drive and ambition to provide support the UK business development executives.
In addition the successful candidate may have:
• The successful candidate may have published vulnerabilities and white papers.
• The successful candidate may have experience in testing Web Services.
• The successful candidate may have experience testing mobile applications.
CERTIFTICATION & MEMBERSHIPS
Core qualifications:-
• Current CREST CCT-INF or CREST CCT-APP certifications
• Current Check Team Leader (CTL) at NCSC
• Current SC clearance
Some of the following certifications are beneficial:-
• Advanced Certified Ethical Hacker
• EnCE - EnCase Certified Examiner http://www.encase.com
• CWSP - Certified Wireless Security Professional
• PWB - Offensive Security : Penetration Testing with Back|Track
• SANS GCIH - GIAC Certified Incident Handler
• Major involvement in Network & Web Application vulnerability assessment and penetration tests utilising the OWASP and OSSTMM open standards and other standards.
• Lead IT Security Assessment, Incident Response (CIRT), and Forensic Analysis tasks for several major manufacturers, law firms, utility and non-profit organisations.
• Lead HIPAA Security regulations compliance assessment and Gap Analysis.
• Implemented Information Security Strategy, Systems Audit for major UK financial institutions.
What can ProCheckUp offer the right candidate?
• Flexible working, including the chance to work from home.
• Career progression.
• Competitive remuneration package.
• Support and backing from a successful, well-funded UK security consultancy.
Interested candidates should send their CV with a covering letter to hr@procheckup.com