Lead Consultant (OSCP, CREST CRT Cert Required)

A Lead Consultant provides expert IT security consultancy and advisory services, helping to secure cyber assets, including networks, mobile applications, web applications, and IoT devices. The role involves security system configuration, source code review, and penetration testing.
Duties & Responsibilities
Conduct technical security assessments, including penetration testing, source code review, and security configuration analysis.
Utilize industry-recognized processes and tools to identify and assess security vulnerabilities, aligning with strategic, tactical, and operational security objectives.
Work closely with clients and internal teams to deliver effective security solutions and recommendations.
Perform compliance audits and system reviews against industry best practices, security policies, and procedural guidelines.
Clearly articulate security findings through detailed reports and presentations, tailored for both technical and non-technical stakeholders.
Provide leadership, guidance, and performance management for project team members
Conduct team reviews and foster continuous improvement through coaching and collaboration
Promote teamwork, ownership, and communication within project teams
Experience in penetration testing, source code review, and host security assessments.
Experience in leading and coaching a team
Strong technical expertise in security testing methodologies, tools, and frameworks such as Metasploit, Kali Linux, Burp Suite, and Tenable Nessus.
Proficiency in scripting languages (e.g., Python, Bash, or PowerShell) for security automation and testing.
Solid understanding of web application technologies, network security principles, and the OSI model (including HTTP, DNS, SSH, FTP, etc.).
Familiarity with established security testing methodologies, including the OWASP Web Security Testing Guide (OWSTG) and the Penetration Testing Execution Standard (PTES).
Relevant industry certifications (e.g., OSCP, CREST CRT) is required
Strong interpersonal and communication skills
A degree in cybersecurity, computer science, or a related field is preferred; however, candidates with a diploma or equivalent experience will be considered.
Enthusiastic about continuous learning and professional growth in the cybersecurity field.

Employment type
Full-time

Work arrangement
No