About the role

I’m currently working with a growing cyber security consultancy looking to hire a Cyber Security Consultant with a strong interest and background in penetration testing, secure development, and offensive security to join their expanding technical team.

This is a fantastic opportunity for someone who enjoys hands-on technical work across security engineering, development and penetration testing, while wanting to grow their career within a highly technical and security-focused consultancy environment.

The business is looking for someone who is naturally curious, technically driven, and genuinely passionate about cyber security. This role would suit someone coming from either a software development, infrastructure, or security engineering background who has developed a strong interest in offensive security and secure engineering practices.

The consultancy places huge value on people who understand technology beneath the surface, enjoy solving difficult technical problems, and actively invest in their own learning through home labs, research, certifications, events, personal projects, or community involvement.

Key experience they’re looking for:

• Strong development skills in at least one language such as Python, JavaScript, Java, C#, or Go
• Hands-on experience or strong interest in penetration testing and offensive security
• Good understanding of web application security and modern development frameworks
• Strong networking and infrastructure fundamentals
• Good Linux and Windows knowledge
• Experience with Microsoft 365, Entra, Defender, or modern cloud security tooling beneficial
• Strong report writing and customer communication skills
• Ability to clearly articulate technical findings to both technical and non-technical audiences

The role will involve:

• Developing and enhancing internal and client-facing security tooling
• Working on secure engineering projects
• Supporting web application penetration testing alongside senior consultants
• Conducting source code review and security-focused testing
• Collaborating across multiple client environments and technologies
• Supporting the delivery of high-quality consultancy engagements

Desired certifications include:

• OSWE
• OSCP
• CSTL
• CCNA

The team is particularly interested in people who care about quality, technical depth, and customer experience rather than simply relying on automated tooling or checklist-driven security.

Additional requirements:

• UK based
• Must have lived in the UK for at least the past 5 years
• Strong written and spoken English
• Eligible for UK security clearance
• No sponsorship available for this position


NRG is an equal opportunities employer committed to promoting a diverse and inclusive workplace. We oppose all forms of unlawful or unfair discrimination on the grounds of any protected characteristic. Our aim is to create an environment that encourages diversity, builds on individual differences, and responds equitably to the needs of all. We proactively take steps to fulfil our legal obligations, remove barriers, monitor for fairness, reflect the communities we serve, and enforce a zero-tolerance policy for breaches of our Equality and Diversity policy.