Security · Full-time
Security Consultant (Offensive & Compliance)
Split your time between penetration testing client estates and guiding SOC 2 / ISO 27001 programmes across the finish line. Our approach is engineer-friendly by design — controls live in workflows, not spreadsheets. You will write reports clients actually read and deliver findings without theatre.
Location
Remote — UK · occasional travel
Type
Full-time
Level
Senior
Salary
£70k – £100k + certification budget
What you’ll do
- Perform web, API and infrastructure penetration tests
- Lead SOC 2 / ISO 27001 implementations from gap analysis to audit
- Embed secure-SDLC practices into client CI pipelines
- Run tabletop exercises and security training
What you bring
- Offensive security experience (OSCP/GWAPT or equivalent proof)
- Familiarity with compliance frameworks and auditor coordination
- Excellent technical writing — reports are a core deliverable
- Ability to say “this risk is fine” when it genuinely is
Bonus points
- Cloud security specialisation (container/IAM attack paths)
- CISSP or ISO 27001 Lead Implementer
- Scripting for tooling development