Cyber Security Consultant / Penetration Tester

Initially full time in the office (Maidenhead/Bracknell) for up to 2 months and then hybrid/remote.

We’re looking for a technically capable and curious Security Consultant to join our security team.

You’ll deliver technical security assessments across client-facing and internal environments, including vulnerability assessments, penetration testing and red-team engagements. You'll be involved throughout the engagement lifecycle, from understanding the environment and conducting testing through to documenting findings and discussing pragmatic remediation with clients.

You'll work across multiple engagements and industries, giving you exposure to a broad range of technologies, security challenges and organisations.

Just as importantly, you'll be able to explain what you've found.

You'll work directly with engineers, security teams and senior stakeholders, translating technical vulnerabilities into clear business risk and practical recommendations.

We're looking for someone who is technically strong, comfortable working independently and with clients, and keen to continue developing their security expertise.

• Conduct vulnerability assessments and penetration testing across a range of environments.
• Participate in red-team and other technical security engagements.
• Identify, validate and clearly document security vulnerabilities.
• Analyse vulnerabilities to understand their technical impact and associated risk.
• Produce high-quality technical reports with clear, actionable remediation recommendations.
• Present and explain findings to both technical and non-technical audiences.
• Work directly with clients to understand their environments, requirements and security concerns.
• Advise clients and internal teams on practical mitigation and security improvements.
• Collaborate with other members of the security team, sharing knowledge, techniques and findings.
• Continue developing your technical knowledge as technologies, vulnerabilities and attack techniques evolve.

• Commercial experience of no less than 2 years in technical cyber security, security consulting, penetration testing
• Experience conducting technical security assessments.Excellent understanding of common security vulnerabilities, assessment techniques and methodologies.
• Strong knowledge of networking, protocols and services.
• Working knowledge of Windows and Linux/Unix environments.
• Experience using scripting or programming to support security testing, analysis or automation.
• Ability to investigate complex technical problems and reach well-reasoned conclusions.
• Experience working with customers, clients or stakeholders in a consultative environment.
• Ability to explain technical security issues clearly to audiences with different levels of technical knowledge.
• Strong written English and the ability to produce clear, accurate technical reports.Ability to obtain SC or DV security clearance if required.
• CREST qualifications such as CRT, or higher.
• Offensive Security certifications such as OSCP.
• Source-code review and secure development practices.
• Cryptographic technologies or cryptanalysis.

A&O IT Group

As a successful and growing global IT services provider, A&O IT Group deliver ‘fully managed’ IT solutions and cyber security services. Combining over 50 years expertise, and boasting an extensive global network, whilst remaining privately owned, A&O IT Group is a trusted IT services partner to clients globally.

This role is subject to a post-offer Background Verification in accordance with the local country legislation.