> Markdown version of [/jobs/ext/2817920-senior-security-consultant](https://www.wearedevelopers.com/jobs/ext/2817920-senior-security-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Security Consultant - **Company:** Prism Infosec - **Location:** Cheltenham, UK - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Active Directory, Amazon Web Services, Application Layers, Software System Penetration Testing, Microsoft Azure, C Sharp (Programming Language), Cloud Computing, Cloud Engineering, Cyber Security, Data Security, Hard Disk Drives, Python (Programming Language), Kerberos (Protocol), Open Source Technology, Windows PowerShell, Prism (Software), Red Team (Cyber Security), Data Logging, Cloud Platform System, Containerization, Kubernetes, Purple Team (Cyber Security), Docker, Vulnerability Analysis - **Published:** September 10, 2026 - **Apply:** https://www.collegerecruiter.com/job/2840577769-senior-security-consultant ## About the Role * 2+ years of hands-on experience delivering Red Team operations, advanced penetration testing, or adversary simulation engagements. * Strong proficiency with at least one major C2 framework (e.g., Mythic, Cobalt Strike, Havoc) and a solid understanding of operational security and detection evasion. * Demonstrable ability to conduct end-to-end offensive operations: reconnaissance, exploitation, post-exploitation, privilege escalation, lateral movement, and persistence. * Practical experience targeting cloud environments including Azure, AWS, and/or GCP, with understanding of hybrid identity and cloud-native attack paths. * Strong technical knowledge of Active Directory, identity abuse, Kerberos-based attacks, and common enterprise exploitation routes. * Experience writing or modifying offensive tools, scripts, payloads, automation, or implants in languages such as Python, PowerShell, or C#. * Excellent written and verbal communication skills, capable of producing high-quality reports and presenting findings to technical and non-technical stakeholders. * Ability to work within a team environment, collaborate effectively with penetration testers, and support blended offensive engagements. * Willingness and capability to conduct traditional penetration testing engagements when required. * Strong analytical thinking, creativity, and a proven ability to approach problems from an adversary's perspective. * Industry recognised certifications such as CCT-APP, CCT-INF, CCRTS, OSCP, OSEP, OSCE, RTO / RTO-II, CREST-equivalent quals, or similar high-rigour offensive credentials. * Experience delivering or supporting intelligence-led or regulatory-driven assessments such as CBEST, STAR-FS, TIBER-EU, or iCAST. * Knowledge of containerisation and orchestration technologies (e.g., Docker, Kubernetes) from both an attacker and defender perspective. * Experience contributing to open-source offensive tooling, blog posts, conference talks, or broader community engagement. * Understanding of defensive operations, detection engineering, logging pipelines, and SOC methodologies, particularly in purple team scenarios. * Experience operating within consultancy environments where autonomy, breadth of skill, and adaptability are highly valued. ## Description * Red Team Engagement Delivery: End-to-end ownership of covert and overt offensive security operations, ensuring engagements meet defined objectives and maintain operational security. * Infrastructure & Tooling Management: Deployment, maintenance, and secure operation of Red Team infrastructure, C2 systems, custom tooling, and automation capabilities. * Technical Execution Across Attack Lifecycles: Reconnaissance, initial access, exploitation, privilege escalation, credential harvesting, lateral movement, cloud persistence, and data access. * Reporting & Communication: Production of high-quality technical and executive-level reports, and delivery of clear verbal debriefs to varied audiences. * Collaboration & Knowledge Sharing: Working with internal security teams-Penetration Testing, OT, and IR-to support joint assessments, share offensive insights, and improve overall defensive posture. * Research & Development: Continuous investigation of new techniques, vulnerabilities, adversary tradecraft, cloud attack paths, and contributions to internal Red Team methodology and tooling. * Team Development & Mentorship: Supporting growth of colleagues through technical guidance, knowledge sharing, review, and encouragement of offensive security skill development., * Work with the red team manager to plan, design, and deliver full-scope Red Team engagements, from reconnaissance through to achieving agreed objectives. * Build, configure, and operate Red Team infrastructure, including command-and-control frameworks such as Mythic, Cobalt Strike, or Havoc. * Conduct exploitation, post-exploitation, lateral movement, and persistence activities across on-premises, hybrid, and cloud estates. * Identify weaknesses across infrastructure, Active Directory, cloud platforms (Azure/AWS/GCP), and application layers. * Develop or modify offensive tooling, scripts, payloads, and automation to support engagements. * Produce clear, detailed, and technically accurate Red Team reports, including findings, impact assessments, and remediation advice. * Support client briefings and debriefings, explaining attack paths and defensive recommendations to both technical and non-technical stakeholders. * Collaborate with penetration testers during blended or purple team operations. * Stay current with emerging attacker TTPs, threat intelligence, cloud exploitation techniques, and novel abuse paths. * Mentor junior consultants and support capability development across the offensive security team. KEY RESULTS/OBJECTIVES * Successfully deliver full-scope Red Team engagements that meet defined objectives, maintain operational security, and provide meaningful, actionable outcomes for clients. * Consistently produce high-quality technical and executive reporting that clearly communicates attack paths, business impact, and remediation priorities. * Demonstrate measurable improvements in client detection, response, and resilience through collaborative purple team activities and post-engagement reviews. * Enhance Prism Infosec's offensive capability by contributing to methodology development, tooling improvements, research, and internal knowledge sharing. * Maintain a strong understanding of emerging attacker techniques, cloud exploitation paths, and relevant threat intelligence, applying this knowledge to ongoing operations. * Support the delivery of penetration testing engagements when required, ensuring the same high standard of technical execution and reporting. * Promote a culture of continuous learning by mentoring junior consultants, participating in internal training sessions, and contributing to team development. * Strengthen client relationships through professionalism, technical credibility, and consistent delivery excellence. * Achieve or maintain CCRTS/CCRTM qualifications to support regulated testing in the UK. ## Related Videos - [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered) - [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Microservices: how to get started with Spring Boot and Kubernetes](https://www.wearedevelopers.com/videos/242-microservices-how-to-get-started-with-spring-boot-and-kubernetes) - [Docker build without Docker](https://www.wearedevelopers.com/videos/100114-docker-build-without-docker) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Building Security Champions](https://www.wearedevelopers.com/magazine/87-building-security-champions)