Careers

JOB TITLE

SENIOR SECURITY CONSULTANT

Headline Statement

Through prior experience, a senior security consultant will have established a reasonable knowledge of a cyber security testing or consulting discipline (for example, infrastructure or application testing or PCI security) and can demonstrate their active involvement in the industry.

They will be passionate about building the brand of the organisation, for example, through speaking at conferences, delivering client presentations or working on industry research/blog posts. A senior consultant will strive to mentor and upskill more junior consultants, particularly in the areas that they excel in themselves and shall deliver training and learning sessions.

On a pathway toward becoming a managing or principal consultant, a senior shall aim to improve their own skills and experience and demonstrate support of the company’s management, goals and objectives. They shall demonstrate an ability to appropriately manage their time, produce a consistently high standard of output from their technical work, be willing to engage and deliver areas outside of their comfort zone (with support from principal/managing consultants) as well as  be supportive culture of their reports, peers and line management.

DIRECT SUPERVISOR AND OVERALL RESPONSIBILTY

TECHNICAL TEAM LINE MANAGER

KEY AREAS OF RESPONSIBILITY

To deliver and oversee consistently high-quality technical information security testing and consultancy services to our clients

To produce technical reports describing the output of your work to a consistently high standard and in a timely manner

To manage and develop existing client relationships and deliver a professional and personable service to our clients at all times

To be available to visit client sites (occasionally at short notice) to deliver testing and consultancy (as defined by your contractual terms).

To assist with client requests and requirements on an ad-hoc basis

To mentor more junior members of the team and assist with the internal training and development of other staff.

To assist with internal business operations such as recruiting, service line developments and Prism Infosec process improvements. 

To contribute towards the effect operation and continual improvement of ISO9001:2015 QMS and ISO27001:2013 ISMS that the business has in place.

Drive the QA process in respect of peer reviews and manage this in line with existing workloads and demands.

To assist with all other reasonable duties as requested by your line manager.

To take responsibility for a specific field of security testing or internal project improvements.

To show initiative with supporting the business and its continual improvement.

KEY TASKS

To deliver and/or oversee project management of:

• Infrastructure and network penetration testing,
• Mobile application testing,
• Security Code review,
• Security Design and Architecture,
• Web and thick client application testing,
• Web services testing,
• Build / Configuration Reviews,
• Risk Assessments,
• General Cyber security Consultancy and advice

To conduct and manage Cyber Security Assessments, implementation and cyber frameworks.

Support sales and pre-sales activities

Recruitment of Technical team members.

Update and maintenance of internal documentation (e.g. policies and wiki’s)

To be involved in the delivery of training courses and presentations both internally and to clients and the cyber security community.

KEY RESULTS/OBJECTIVES

Quality security testing and audit delivered in line with the company methodologies and policies.

Ensuring that all client proposals and reports are comprehensive and consistent for all customer deliverables both as an individual and from within the test team.

Maintain client satisfaction associated with all projects delivered.

Timely delivery of project deliverables and meeting any other deadlines.

High standard of time management across all duties.

To support the company’s management, goals and objectives at all times.

Visible presence in the office to provide support to less senior members of the team and for collaboration with wider tech team and departments

RESPONSIBLE FOR STAFF/EQUIPMENT

Any assets provided by the company e.g. Laptop, hard drives, mobile phone etc.

Testing and lab systems.

Office keys and entry fob.

CONSULTS WITH

Line Management, Junior Tech Team, Sales and PMO

TERM OF EMPLOYMENT

Permanent Full Time

QUALIFICATION

Essential:

CRT or equivalent

Desirable:

CCT or equivalent

Excellent Listening and Communication Skills

Ability to work independently on-site, within the Prism Infosec offices and in the home work environment.

Supportive of company management and objectives

Confidence to deliver projects outside of comfort zone

Excellent client relationship and presentational skills

Can do attitude

Ambitious

Ability to rise to challenges

Team player