Cyber Security Consultant

We are seeking an experienced Cyber Security Consultant to support a short-term engagement focused on helping an organisation achieve and maintain Cyber Essentials Plus certification. This is an excellent opportunity for a Cyber Security Consultant with strong vulnerability management, endpoint remediation and security compliance experience to deliver immediate value within a fast-paced environment. Working closely with operational, infrastructure and security teams, the Cyber Security Consultant will leverage Rapid7 and Automox technologies to identify, prioritise and remediate vulnerabilities while supporting Cyber Essentials Plus readiness and compliance activities., * Conduct Rapid7 vulnerability assessments and review existing security findings.

• Prioritise and coordinate remediation activities aligned to Cyber Essentials Plus requirements.
• Lead vulnerability remediation workshops with operational and infrastructure teams.
• Configure, optimise and support the use of Automox for automated patch deployment and compliance reporting.
• Identify missing patches, software vulnerabilities and configuration weaknesses across endpoint estates.
• Provide technical guidance on the remediation of operating system and application vulnerabilities.
• Validate fixes through follow-up vulnerability scans and reporting.
• Assist with Cyber Essentials Plus preparation activities and evidence gathering.
• Produce concise documentation, remediation plans and handover materials.
• Work with stakeholders to reduce overall vulnerability exposure and improve security posture.

• Strong commercial experience with Rapid7 InsightVM and/or the wider Rapid7 security platform.
• Experience supporting organisations through Cyber Essentials Plus certification.
• Proven background delivering vulnerability management and remediation programmes.
• Hands-on experience administering and troubleshooting Automox patch management solutions.
• Strong knowledge of Windows endpoint security and patch management.
• Good understanding of security hardening, vulnerability scoring and remediation prioritisation.
• Experience working within enterprise IT infrastructure environments.
• Excellent stakeholder engagement, communication and workshop facilitation skills.
• Experience with Microsoft Intune, MECM/SCCM or other endpoint management platforms (desirable).
• Knowledge of the Microsoft Defender security suite (desirable).
• Experience producing vulnerability remediation reporting and compliance documentation (desirable).
• Relevant certifications such as CompTIA Security+, SC-200, SC-300, Rapid7 certifications, CISSP or CEH (desirable).

If you are an experienced Cyber Security Consultant seeking a high-impact contract engagement where you can improve security posture, reduce vulnerability exposure and support Cyber Essentials Plus accreditation, we’d love to hear from you. Apply today - Professional references required.