Role: Cyber Security Consultant Location: Hybrid - 2 days in the Nottingham office
Salary: £625-£750 per day - Initial 3 month contract
I’m working with a growing software business in Nottingham who are looking for an experienced Cyber Security Consultant to come in on an initial 3-month contract.
This is not an automation testing role, and it’s not a pure penetration testing assignment either.
They need someone who can come in, take a step back, and look at the wider business from a cyber security perspective. The focus is around understanding where the vulnerabilities are, how security is currently approached, and what needs to be improved across the product and business environment.
They currently have vulnerability scanning tooling in place, which has been used for the last couple of years, but they now want someone to review how effective that approach is and whether they are getting the right level of value, visibility and control from it.
This is a proper “zoom out” piece of work. They need someone who can assess, challenge, prioritise and give them a clear plan of action.
What you’ll be doing
You’ll be carrying out an initial cyber security review across the business and product environment.
This will include:
* Reviewing the current security posture across the business
* Looking at the wider product landscape from a security perspective
* Assessing the current approach to vulnerability management
* Reviewing how existing security tooling is being used
* Looking at the overall approach to testing from a security point of view
* Identifying vulnerabilities, gaps, risks and areas of exposure
* Speaking with technical and non-technical stakeholders
* Producing clear findings and practical recommendations
* Helping shape a sensible remediation roadmap
What they’re looking for
This would suit someone who has operated as a Cyber Security Consultant, Security Assurance Consultant, Information Security Consultant, Application Security Consultant, or similar.
You’ll need experience across areas such as:
* Cyber security audits / assessments
* Vulnerability management
* Product or application security
* Security testing strategy
* Secure SDLC
* Risk, controls and remediation planning
* OWASP principles
* Reviewing security tooling and processes
* Translating technical findings into clear business language
You don’t need to be a pure pen tester for this role. They are looking for someone who can take a wider view and help the business understand what needs tightening up.
The setup
* Initial 3-month contract
* Nottingham office twice per week
* Product-led software environment
* Practical security review rather than box-ticking
Interested?
Drop me a message and I’ll talk you through the details - Yas at Rebel Recruiters
We welcome diverse applicants and are dedicated to treating all applicants with dignity and respect, regardless of background