Cyber Security Consultant

A&O IT Group

2d

About The Position

As Security Consultant (SC) you will use your existing strong technical and analytical skills to develop a strategic and pragmatic view of enterprise security as well as conduct detailed security assessments (vulnerability analysis, penetration testing, red team engagements) for both client-facing and internal environments, including the creation of technical reports. Working on multiple projects provides exposure to different industries. You'll be collaborating with members of the Corsaire security team and directly with the clients to provide advice on the mitigation of discovered flaws or implementing state-of-the-art security mechanisms. Through exposure to clients and peers from executives through senior management to engineers and technical practitioners, you will further develop your existing proficiency in written and oral communication skills and ability to articulate complex technical issues to business and technology contacts alike. They must be proficient with supporting multiple stakeholders and providing quick responses and timely follow up to their needs and inquiries. The SC must be a quick learner and have the natural ability to think on their feet in high-pressure situations, providing technical details and acting as an industry subject matter expert.

Requirements

• Minimum of 3 years of commercial experience in a similar role.
• Experience in a client-facing consultative environment (either with internal or external customers).
• Strong project management and prioritisation skills with the ability to manage your workload.
• Knowledge of security assessment and audit tools, techniques and methodologies.
• Good knowledge of network protocols and services.
• Working knowledge of Windows and POSIX-based operating systems.
• Programming or scripting experience.
• Familiarity with standard Office.
• Understanding of cryptographic concepts and technologies.
• Strong project management and prioritisation skills.
• Able to absorb complex technical information and communicate effectively to different levels of technical and business audiences.
• Strong written English required for client communications and technical reporting.
• Able to gain SC or DV (Security Clearance) if required.

Nice To Haves

• CREST CRT or higher CREST qualification.
• Scientific, Engineering or Technical Bachelor’s Degree or equivalent.
• Offensive Security OSCP certification.
• Post-graduate study or qualification in a related discipline.
• Detailed cryptanalysis or cryptographic experience.
• Experience with non-IP protocols.
• Experience with enterprise operating systems and platforms (iSeries, Solaris, VMWare ESX).
• Experience with source code review and QA.
• Understanding the needs, objectives and constraints of those in other disciplines and functions.

Responsibilities

• Conduct detailed security assessments (vulnerability analysis, penetration testing, red team engagements) for both client-facing and internal environments.
• Create technical reports detailing security assessment findings.
• Collaborate with the security team and clients to advise on mitigation of discovered flaws.
• Implement state-of-the-art security mechanisms.
• Develop proficiency in written and oral communication skills.
• Articulate complex technical issues to business and technology contacts.
• Support multiple stakeholders and provide quick responses and timely follow-up.
• Act as an industry subject matter expert.

Benefits

• Encourage diversity and seek to attract individuals with unique backgrounds and perspectives.
• Build a team with a diverse mix of people and skills, where everyone feels welcome and able to succeed.
• Commitment to equal employment opportunity regardless of race, colour, religion, sex, sexual orientation, age, marital status, disability or gender identity.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Associate degree