Cyber Security Consultant

Salary: £? - ? per year

• We are looking for an experienced Cyber Security Consultant, Security Assurance Consultant, Information Security Consultant, Application Security Consultant, or similar.
• We need experience across cyber security audits and assessments.
• We need experience in vulnerability management.
• We need experience in product or application security.
• We need experience in security testing strategy.
• We need experience in secure SDLC.
• We need experience in risk, controls, and remediation planning.
• We need knowledge of OWASP principles.
• We need experience reviewing security tooling and processes.
• We need the ability to translate technical findings into clear business language.

• We will ask you to carry out an initial cyber security review across our business and product environment.
• You will review our current security posture across the business.
• You will assess the wider product landscape from a security perspective.
• You will evaluate our current approach to vulnerability management.
• You will review how our existing security tooling is being used.
• You will examine our overall approach to testing from a security point of view.
• You will identify vulnerabilities, gaps, risks, and areas of exposure.
• You will speak with technical and non-technical stakeholders.
• You will produce clear findings and practical recommendations.
• You will help shape a sensible remediation roadmap.

• OWASP
• Security

We are a growing software business based in Nottingham, and this is an initial 3-month contract role with a hybrid setup requiring two days per week in our Nottingham office. This is a practical security review rather than box‑ticking, and we are looking for someone who can step back, assess the wider business from a cyber security perspective, and help us understand where improvements are needed across our product and business environment.

We are committed to treating all applicants with dignity and respect, regardless of background.