Cyber Vulnerability Security Analyst in London

We're working with a leading global professional services company that is investing significantly in the growth of its Cyber Risk Advisory practice and is looking to hire a Cyber Security Consultant with a strong background in penetration testing and technical security assessments.

This is a predominantly hands-on technical role, with around 70% of your time focused on technical security delivery, including penetration testing across web applications, APIs and internal/external infrastructure, alongside Cyber Essentials Plus and wider vulnerability and security assessments.

You'll work directly with a diverse portfolio of clients, identifying and safely validating security weaknesses, explaining the associated risks and providing practical recommendations to improve their overall security posture. Alongside the technical work, you'll also have the opportunity to broaden your consulting experience across areas such as cyber risk, security controls, cloud security, audit readiness and security advisory.

• Delivering penetration testing engagements across web applications, APIs and internal/external network infrastructure.
• Using both manual and tool-assisted testing techniques aligned with recognised methodologies including OWASP, PTES and MITRE ATT&CK.
• Supporting the delivery of Cyber Essentials Plus assessments, including technical testing, remediation verification and helping clients through the certification process.
• Conducting wider technical security assessments, including vulnerability assessments, cloud security reviews and configuration reviews.
• Producing high-quality technical reports and presenting findings to both technical and non-technical stakeholders.
• Supporting broader cyber advisory engagements including cyber risk assessments, security control reviews, remediation planning and audit readiness.

You'll ideally have professional experience delivering client-facing penetration testing engagements, either independently or as part of a wider consulting team.

• Web application and API penetration testing
• Internal and external infrastructure penetration testing
• Kali Linux, Burp Suite and Nmap
• Windows and Linux security
• Active Directory and Microsoft Entra ID
• TCP/IP and network security
• OWASP and recognised penetration testing methodologies
• CIS Benchmarks and security configuration reviews
• Scripting using Python, PowerShell, Bash or similar

A recognised practical penetration testing certification would be beneficial, such as:

• Existing Cyber Essentials / Cyber Essentials Plus Assessor experience would also be highly desirable, although training can be provided where required.
• AWS, Azure or GCP security
• Microsoft 365 security
• Cloud penetration testing
• Mobile application testing
• Wireless security testing
• Cyber risk assessments

This is an opportunity to join a leading global professional services organisation at a point of significant investment in its Cyber Risk Advisory capability. You'll remain hands-on with penetration testing and technical security work while also gaining exposure to a broader range of cyber advisory engagements.

For someone looking to build a long-term career in security consulting, it offers a strong combination of hands-on penetration testing, Cyber Essentials Plus delivery, exposure to a diverse client base, broader cyber risk and advisory experience, professional development and genuine opportunities to progress.