Employment International
Senior Cybersecurity Consultant – AD, Infrastructure & Penetration Testing
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Job Title: Senior Cybersecurity Consultant – AD, Infrastructure & Penetration Testing
Location: Hybrid/remote location in Essex areas
Contract: Inside IR35
Key Areas of Expertise
Active Directory Security – Very Important
- Strong hands-on experience with:
- Active Directory security assessments
- Privilege escalation
- Credential exposure and credential attacks
- Lateral movement
- Domain compromise scenarios
- Tiered administration / AD tiering
- Service account security and abuse
- Group Policy security
- Kerberos
- NTLM
- Entra ID / Azure AD
- Experience interpreting attack paths and identifying weaknesses across enterprise identity environments is essential.
Infrastructure Security
- Strong understanding of:
- Windows Server
- VMware
- Hyper-V
- Enterprise networking
- Firewalls
- VLANs and network segmentation
- DNS
- DHCP
- Cloud networking
- IAM and infrastructure security
- Experience assessing internal infrastructure, cloud environments, and network segmentation is highly desirable.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Penetration Testing / NodeZero
- Experience with Horizon3.ai NodeZero or similar autonomous penetration-testing platforms would be highly valuable.
- The successful contractor should be comfortable with:
- Deploying testing appliances/runners
- Scoping internal and external assessments
- Reviewing automated security findings
- Validating findings and identifying false positives
- Understanding attack paths
- Prioritising remediation
- Re-testing remediation
- Advising on compensating controls
The ability to translate automated findings into practical security recommendations is particularly important.
Reporting & Client-Facing Skills – Critical
- Candidate should be confident in:
- Producing clear technical and executive security reports
- Presenting findings to IT and security teams
- Explaining business risk to senior stakeholders, partners, and directors
- Running remediation workshops
- Supporting Cyber Essentials Plus
- Supporting ISO 27001 discussions and evidence
- Assisting with client security questionnaires
- Communicating complex vulnerabilities in clear business language
- Experience working with professional services, legal firms, or similarly regulated environments would be advantageous.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Typical Day-to-Day Activities
- Deploying NodeZero appliances/runners
- Defining and scoping internal/external testing
- Conducting Active Directory and infrastructure security assessments
- Reviewing findings on a weekly/monthly basis
- Validating attack paths and security weaknesses
- Producing technical and executive reports
- Presenting findings to clients
- Running remediation sessions
- Re-testing fixes
- Supporting compliance and audit evidence
- Advising clients on practical remediation strategies
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location