Cyber Security Consultant

Cyber Security Consultant – with a Backbone for Vulnerability Management

Location: Gloucester

Salary: Upto £60,000 (if you absolutely tick every box we may be able to discuss some flex on that)

Let’s cut to it: we need someone who can get a grip on Vulnerability Management - not just run scans, dump reports, and hope for the best. If your idea of vuln management is emailing CSVs and chasing people down like an overpaid hall monitor, this won’t end well.

We’re looking for someone who owns the problem. Who understands that identifying vulnerabilities is easy - it’s driving actual remediation across complex environments that takes experience, patience, and (let’s be honest) the occasional battle.

You’ll be the person ensuring risk isn’t just “tracked,” but actually reduced. You’ll work directly with the people who build and run the systems, understand why something hasn’t been patched, and guide a realistic path forward - because shouting “just fix it” rarely works.

So what’s the job?

• Vulnerability Management is front and centre. You’ll be managing the full lifecycle - from tooling and triage to prioritisation and follow-up. You’ll work with internal teams and vendors to make sure we’re not just collecting data but acting on it.
• Stakeholder wrangling – because getting vulnerabilities fixed requires more than just dashboards. It means building relationships, explaining risk in business terms, and pushing (gently or not) for action.
• You’ll support internal projects with real security guidance - no “template theatre,” just straight-up risk-based advice.
• You’ll lead Cyber input into procurement, assessing third-party security postures without assuming every supplier is lying (even if they are).
• You’ll mentor junior team members, because you’ve been there, made the mistakes, and learned the lessons. Now it’s your turn to pay it forward.

What you need to bring:

• Deep, practical experience of vulnerability management - the tools, the process, the politics, and the psychology.
• Strong understanding of enterprise ICT, cyber principles, and cloud security - enough to speak the language of both engineers and execs.
• A grasp of the SDLC and CI/CD pipeline, including how (and where) security fits in without slowing everything to a crawl.
• Excellent communication. If you can’t explain risk to a product owner without resorting to metaphors about burning buildings, this probably isn’t for you.

Why this role?

Because this isn’t vulnerability management theatre. It’s not a checkbox exercise. You’ll have the opportunity - and the backing - to build something that actually works. You’ll shape how we approach vuln remediation across the business. You’ll get senior visibility, support from leadership, and space to do it properly.

You’ll also get to mentor, influence, and grow beyond just operational firefighting.

If you’re the kind of person who can handle messy realities, bring order to chaos, and still sleep at night knowing you’ve nudged the risk needle in the right direction - this one’s for you.

If not? Keep scrolling.