Job Search

We are seeking a motivated Graduate Security Consultant to join a growing professional services team and support clients in protecting their people, information, systems, and operations. This entry-level role offers the opportunity to develop practical experience across cybersecurity, risk management, governance, and security improvement projects. You will work alongside experienced consultants, learning how to understand client requirements, assess risks, and recommend proportionate, effective controls.

Your responsibilities will include contributing to security assessments, documenting findings, researching threats and vulnerabilities, and helping develop reports, policies, procedures, and improvement plans. You may support activities such as risk assessments, security reviews, compliance evaluations, control testing, incident preparedness, and client workshops. You will be expected to analyse information carefully, communicate technical and business risks clearly, maintain accurate project documentation, and manage agreed tasks within deadlines. As your experience grows, you will take increasing ownership of workstreams and build trusted relationships with clients and colleagues.

Applicants should have, or be close to completing, a degree or equivalent qualification in cybersecurity, computer science, information technology, risk, engineering, or a related subject. We are looking for strong analytical and problem-solving skills, a genuine interest in current security threats and industry developments, and the ability to explain complex ideas to both technical and non-technical audiences. Familiarity with security principles, networking, cloud technologies, risk frameworks, or standards such as ISO 27001 and NIST would be advantageous, but full training will be provided. You should be organised, curious, professional, and willing to learn in a collaborative environment. Eligibility to work in the relevant location and a willingness to undergo appropriate background screening may be required.

We are seeking an experienced Security Consultant to provide expert advice and practical guidance across a range of information and cyber security initiatives. The successful candidate will work with stakeholders to understand business risks, assess current security capabilities, and recommend proportionate controls that support operational and strategic objectives. This role requires a confident communicator who can translate complex technical risks into clear, actionable information for both technical and non-technical audiences.

Key responsibilities will include conducting security assessments, risk analyses, control reviews, and gap assessments against recognised security frameworks and regulatory requirements. You will contribute to the development and improvement of security policies, standards, procedures, and governance processes, while supporting security architecture reviews and the assessment of new technologies, suppliers, and projects. The role may also involve assisting with incident response planning, security awareness activities, audit preparation, remediation tracking, and the delivery of clear written reports and presentations to senior stakeholders. You will be expected to manage competing priorities, maintain accurate documentation, and build effective working relationships across multiple teams.

Applicants should have demonstrable experience in a security consulting, information security, cyber risk, governance, or related role. A strong understanding of risk management principles, security controls, vulnerability management, identity and access management, data protection, and incident management is required. Familiarity with frameworks and standards such as ISO 27001, NIST, CIS Controls, or relevant privacy regulations would be advantageous. Professional certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Auditor, or equivalent experience are welcomed. You should be analytical, organised, commercially aware, and comfortable working independently as well as collaboratively. The ability to influence stakeholders, challenge constructively, and deliver high-quality outcomes within agreed timescales is essential.

We are seeking a Security Testing Consultant (Penetration Tester) to join a collaborative cyber security team in a hybrid working environment. In this role, you will plan and deliver authorised penetration tests across web applications, mobile applications, APIs, networks, cloud environments and infrastructure. You will work with technical and business stakeholders to understand testing objectives, identify attack paths, assess risk and provide practical recommendations that improve overall security resilience.

Your responsibilities will include scoping engagements, developing test plans, conducting manual and automated security assessments, validating vulnerabilities and maintaining accurate evidence throughout each assignment. You will prepare clear, professional reports that explain technical findings in a way suitable for both technical and non-technical audiences, including risk ratings, business impact and prioritised remediation guidance. You will also present findings to stakeholders, support retesting activities and contribute to the continuous improvement of testing methodologies, tools and internal security processes. Where appropriate, you may assist with threat modelling, secure design reviews, vulnerability assessments and incident response exercises.

The successful candidate will have practical experience in penetration testing or security consultancy, with a strong understanding of common web, network, application and cloud vulnerabilities. Familiarity with recognised security frameworks and standards, such as OWASP, PTES, CREST and NIST, is desirable. Relevant professional qualifications or certifications, including OSCP, CREST, CHECK, CRT, CSTM or equivalent experience, would be advantageous. You should be analytical, curious and confident communicating complex issues clearly, while maintaining a professional and ethical approach to authorised testing. Experience with tools such as Burp Suite, Nmap, Metasploit, vulnerability scanners and scripting languages such as Python or PowerShell would be beneficial. The role offers a balance of remote and on-site work, with occasional travel and direct engagement with clients and project teams.

We are seeking a Security Testing Consultant (Penetration Tester) to join a collaborative cybersecurity team on a hybrid basis. In this role, you will plan and deliver penetration tests across web applications, APIs, mobile platforms, infrastructure, cloud environments and networks. You will assess security controls, identify vulnerabilities and determine the potential business impact of weaknesses using recognised testing methodologies and industry-standard tools. The position involves working with technical and non-technical stakeholders to understand environments, agree testing objectives and provide clear, practical advice to improve security resilience.

Your responsibilities will include conducting manual and automated security assessments, validating findings, safely exploiting vulnerabilities where appropriate and maintaining accurate testing evidence. You will prepare high-quality reports that explain technical issues in a clear and accessible way, prioritise risks and provide actionable remediation guidance. You will also present results to clients and internal teams, support retesting activities, contribute to security testing standards and help improve assessment processes. Some assignments may require involvement in threat modelling, secure design reviews, social engineering exercises or incident and vulnerability management activities.

Applicants should have demonstrable experience in penetration testing, security consultancy or a closely related role, together with a strong understanding of common attack techniques, vulnerability management and secure development principles. Practical experience with tools such as Burp Suite, Nmap, Metasploit, Kali Linux and cloud security platforms is desirable. Relevant certifications, such as CREST, OSCP, OSWE, PNPT or equivalent professional qualifications, are advantageous. Strong communication, report-writing and stakeholder-management skills are essential, as is the ability to manage multiple engagements, work independently and maintain professional integrity. This hybrid role offers flexibility, varied technical challenges and opportunities for continued learning in a supportive security environment.

We are seeking an experienced Solution Architect specialising in Identity and Access Management (IAM) to design secure, scalable, and sustainable identity solutions across a complex technology environment. In this role, you will define IAM architecture, establish technical standards, and translate business and security requirements into practical solutions that support workforce, customer, application, and privileged identities.

You will work closely with cybersecurity, infrastructure, application, data, risk, and business stakeholders to develop architecture roadmaps and ensure consistent implementation across cloud and on-premises platforms. Responsibilities will include assessing current IAM capabilities, identifying gaps and risks, designing target-state architectures, and producing high-quality documentation such as principles, reference architectures, solution designs, integration patterns, and technology standards. You will provide architectural direction for identity lifecycle management, access governance, authentication, authorisation, federation, single sign-on, privileged access, directory services, and modern identity protocols including SAML, OAuth 2.0 and OpenID Connect.

The successful candidate will bring substantial experience in IAM architecture or a closely related security architecture role, with a strong understanding of enterprise security frameworks, zero-trust principles, and regulatory expectations. Practical knowledge of leading IAM, identity governance, privileged access, and cloud identity platforms is essential, along with experience integrating identity services with business applications, APIs, directories, and infrastructure. Strong communication and stakeholder management skills are required, as you will explain complex technical concepts to both technical and non-technical audiences, influence design decisions, and support delivery teams through implementation. Relevant professional certifications in security, architecture, or IAM are advantageous. This is an opportunity to shape a strategic identity capability and improve the security, usability, and resilience of access across the organisation.