Offres penetration testing à NottinghamCréer des alertes d'emploi

Cyber Security Principal Consultant\n\nAs one of the world's largest networks of audit, tax and consulting firms, RSM delivers big ideas and premium service to help middle-market businesses thrive. We are a fast-growing firm with big ambitions -- we have a clear goal to become the premium adviser to the middle market, globally. This vision touches everything we do, motivating and inspiring us to become better every day. If you are looking for a firm where you can build a future and make an impact, then RSM is the place for you.\n\nMake an Impact at RSM UK\n\nAt RSM, our consulting team brings together diverse advisory experts to deliver our six core solutions: business transformation, forensic, deal services, restructuring, finance function support, and risk and governance.\n\nOur solutions are designed to address the unique needs, challenges, and opportunities our clients face as they strive to achieve their aspirations and organisational goals. Whether it’s supporting global expansion, developing acquisition strategies, facilitating private equity investments, or collaborating with boards to manage risk and governance, our consulting experts work as one cohesive team. We prioritise simplicity, providing data-driven insights, value-added assurance, and high-quality execution to empower our clients in building sustainable, future-fit businesses.\n\nIt’s an exciting time to join our consulting team, as we embark on ambitious growth plans that promise to create diverse career opportunities. We are committed to enhancing our six solutions, expanding and developing our team of expert consultants, embracing a digital-first approach, strengthening our global presence, and building strong client relationships.\n\nAs a Principal Consultant, specialising in Cyber Security within Technology Risk Assurance, you will be responsible for assisting in managing, delivering and leading cyber engagements across a diverse portfolio of clients across the breadth of the mid-market, ensuring both excellent client service and identification of further work opportunities. The role will involve managing the delivery of agreed work activities with a primary focus on technical security including offensive security services.\n\nYou'll make an impact by:\n\n * Delivering cyber security engagements, from scoping through to delivery, debriefs and report writing.\n\n * Contributing towards the development of exciting new market facing cyber security products and services and our internal knowledge sharing hubs.\n\n * Supporting the development of other members of the team.\n\n * Representing RSM in external meetings, including attendance at client workshops, audit committees, and regional networking events.\n\n * Building trusted relationships with senior client stakeholders and identifying client and service opportunities.\n\nWhat we are looking for:\n\nAre you someone who thrives on variety, loves learning new things, and enjoys connecting with people? If you can spot inefficiencies in everyday life and are passionate about making improvements, this role is perfect for you!\n\nWe value diverse experiences and perspectives. Here’s what we’re looking for in our ideal candidate:\n\n * Experience of working in professional services firms.\n\n * Demonstrable experience of delivering and leading cyber security advisory and offensive security testing engagements.\n\n * Demonstrable experience of delivering advisory engagements relevant to security operations and defensive controls.\n\n * Understand technology trends, cyber threats, and industry issues.\n\n * Proficient in report writing.\n\n * Experience with security testing techniques such as threat modelling, reconnaissance, social engineering, enumeration, attack path mapping, exploitation, and clean up from a variety of adversarial perspectives (white/grey/black box testing).\n\n * Proficient in infrastructure and web application testing, with experience in API testing desirable.\n\n * Proficient in using common commercial and open-source penetration testing tool sets including Kali Linux, Metasploit, Nmap, BurpSuite, Nessus and other industry standard tools.\n\n * Hold an industry recognised certification (this can be at any level from Offensive Security Certified Professional (OSCP); CompTIA PenTest+; CHECK, CREST).\n\n * Motivated to lead with purpose, innovate, and make a genuine lasting impact.\n\n * Takes responsibility for work tasks and quality, managing own workload and deadlines under supervision.\n\nWhat we can offer you:\n\nWe recognise that our people are our most important assets. That’s why we offer a flexible reward and benefits package that will help you have fulfilling experience, both in and out of work.\n\n * Hybrid working.\n\n * 26 Days Holiday.\n\n * Lifestyle, Health, and Wellbeing including financial wellbeing benefits such as financial tools, electric car scheme and access to a virtual GP.\n\n * Access to a suite of 300+ courses on demand developed by our inhouse Talent Development team

The Opportunity ProCheckUp, an elite independent cybersecurity consultancy serving FTSE 100 corporations, UK government authorities, and international financial institutions, is seeking an experienced Penetration Tester with SC Clearance to join our expanding remote team. This is an exceptional opportunity to conduct high-impact security assessments across diverse enterprise environments while maintaining work-life balance through flexible remote working. You'll contribute to ProCheckUp's ambitious expansion phase, working alongside industry-leading security professionals on mission-critical infrastructure, applications, and network security testing for the UK's most security-conscious organizations. What You'll Do Core Responsibilities: • Conduct advanced penetration testing across network infrastructure, web applications, and mobile platforms for enterprise clients, • Perform vulnerability assessments, threat modelling, and risk analysis across diverse technical environments, • Execute social engineering assessments and physical security testing, • Produce detailed scoping documents and executive-level penetration testing reports aligned with CREST and NCSC standards, • Lead incident response investigations and digital forensic analysis when required, • Work independently on client-facing assessments whilst collaborating with senior consultants and team leaders, • SCADA/OT environment security testing, • Cloud infrastructure penetration testing (AWS, Azure), • Web services and API security, • Mobile application testing (iOS/Android) Who You Are Essential Experience & Skills: • Minimum 3+ years professional penetration testing experience, • Demonstrable expertise in network, application, and infrastructure security testing, • Strong hands-on proficiency with penetration testing frameworks, exploitation techniques, and security tools (Metasploit, Burp Suite, Wireshark, custom tools), • Deep technical knowledge of Windows, Linux, Unix operating systems and TCP/IP networking protocols, • Proven ability to perform source code reviews and application security analysis, • Advanced understanding of web application vulnerabilities (OWASP Top 10) and mitigation strategies, • Excellent report writing and executive communication skills—ability to translate technical findings into business risk, • Ability to work autonomously and adapt to client-specific environments, • CREST/CyberScheme CCTM/CSTM CCT/CSTL-INF or CCT/CSTL-APP (current), • NCSC CHECK Team Leader (CTL) (current) or CHECK Team Member (CTM) (current) preferred but not essential, • CEH Advanced (AECH) or OSCP, • SANS GCIH, GPEN, or GWAPT, • EnCase Certified Examiner (EnCE), • CWSP (Certified Wireless Security Professional), • Published security research, CVE disclosures, or white papers, • Curiosity and passion for emerging security threats and attack methodologies, • Drive to mentor junior consultants and contribute to technical innovation, • Professional demeanour with excellent client-facing communication, • Attention to detail in all deliverables, particularly technical reports and evidence documentation Why ProCheckUp? ✓ Proven Track Record: 25+ years delivering security services to world-leading organisations; holders of NCSC CHECK, CREST, PCI QSA, and PCI ASV accreditation's ✓ Prestigious Client Base: Work directly with FTSE 100 companies, UK government bodies, international law firms, and critical infrastructure operators ✓ Technical Leadership: Collaborate with industry experts who publish research, present at major conferences, and drive the cybersecurity industry forward ✓ Flexibility & Autonomy: Remote-first working with complete location flexibility across the UK—work from home, co-working spaces, or client sites as you prefer ✓ Career Progression: Clear advancement pathway from Consultant → Senior Consultant → Team Leader → Technical Director; investment in advanced certifications and professional development ✓ Competitive Remuneration: Market-leading salary package (£65,000–£85,000+ depending on experience and certifications) plus comprehensive benefits ✓ Backing of a Stable, Well-Funded Firm: Work for an independent, profitable, growth-focused security consultancy—not a commodity testing mill ✓ Continuous Learning: Access to research funding, certification sponsorship, conference attendance, and exposure to cutting-edge threat landscapes The Application Process This is a carefully selected search—we're looking for genuine penetration testing professionals with the technical depth to advise enterprise clients, not script-runner-test shops. To Apply: • Submit your CV (including certifications, security clearance status, and estimated clearance renewal date), • Write a brief covering letter (150–250 words) addressing:, • Why ProCheckUp's mission and client base appeal to you, • Your remote working setup and availability (notice period, start date), • Screening call with HR (15 mins): Verify background, clearance status, and role fit, • Technical interview with Senior Consultant (45 mins): Deep-dive on penetration testing methodology, recent case studies, and security trends, • Final interview with Hiring Manager/Technical Director (30 mins): Culture fit, growth ambition, and team dynamics Logistics | Position Type | Full-Time, Permanent | | Location | Remote, United Kingdom | | Security Clearance | SC (Minimum) | | Working Arrangements | Flexible remote; occasional travel for client engagements | | Salary | £65,000–£95,000+ based on experience, certifications, and client-facing impact | | Benefits Package | Competitive pension, health insurance, professional development budget, | | Notice Period | 2-8 weeks preferred; negotiable for exceptional candidates | About ProCheckUp Founded in 1999, ProCheckUp has evolved from a specialist penetration testing firm into a multi-disciplinary cybersecurity consultancy trusted by the world's most security-conscious organizations. Our team of CHECK Team Leaders, CREST Certified Testers, and forensic specialists delivers: • Penetration Testing & Security Audits: Infrastructure, application, and mobile assessments, • Compliance Advisory: PCI DSS, GDPR, ISO27001 implementations and certifications, • Incident Response & Forensics: 24/7 emergency response and digital evidence analysis Equal Opportunities ProCheckUp is an equal opportunities employer. We celebrate diversity and are committed to building an inclusive environment for all employees, regardless of gender, race, ethnicity, religion, disability, age, sexual orientation, or gender identity. We encourage applications from underrepresented groups in cybersecurity. Security Vetting: All successful candidates will be subject to UK security vetting procedures. Applicants must have resided in the UK for the last 5+ years to be eligible for SC clearance (or provide documented reasons for absence). Previous security clearance experience is valued but not essential. *

A leading financial technology firm in Nottingham seeks a skilled Offensive Security specialist to conduct penetration testing for web applications, APIs, and networks.This role demands proficiency in cybersecurity practices and tools, focusing on discovering and mitigating vulnerabilities.Candidate

A global data and technology company is seeking an experienced offensive security professional for a fully remote position. The role involves conducting various security assessments, including penetration testing and social engineering. Join the team to contribute to improving the organization’s s