Principal Cyber Security Consultant Job at FSP (Glasgow or Reading, Berkshire)

New

Senior Security Consultant

We have an exciting opportunity for a Senior Security Consultant to join our gro...

Location

United Kingdom , Glasgow or Reading, Berkshire

Salary:

Not provided

FSP

Expiration Date

Until further notice

Requirements

Extensive experience of designing, leading and delivering cyber governance, risk and assurance outcomes
Strong knowledge of recognised cyber security frameworks and standards, including ISO/IEC 27001, NIS Directives, NIST, and UK Government Functional Standards
Experience aligning security controls to MOD requirements such as DEFSTAN 05-138, JSP 440, JSP 604 and Defence Cyber Resilience policies
Experience applying UK Government security and assurance frameworks, including GovAssure, the Cyber Assessment Framework (CAF), Defence Cyber Certification (DCC) and Government Standard (GovS) 007
Relevant academic or professional qualifications, such as, an MSc in cyber security or related specialism, Cyber Essentials Assessor, Cyber Assurance Assessor, CISM, CISSP, PCIRM or ISO/IEC 27001 Lead Implementer or Lead Auditor certification
Hold, or are actively working towards, Principal or Chartered Cyber Security Professional (ChCSP) status
Eligible to work in the UK and able to obtain and maintain UK security clearances
Flexibility to work from home, FSP office locations or at times visit client sites

Job Responsibility

Lead cyber governance, risk and compliance engagements, applying strong knowledge of cyber threats, risks, controls and mitigations to deliver effective security outcomes
Engage with clients to understand their threat landscape and business context, conducting risk and compliance assessments against recognised frameworks (e.g. ISO 27001, NIST, SOC 2)
Design, review and advise on the implementation and adoption of information security policies, standards, procedures and frameworks
Lead cyber and third-party risk assessments, evaluate supplier security posture, and provide risk-based recommendations for supplier selection and oversight
Identify control gaps, document findings, and track remediation activities to support assurance and audit outcomes
Produce clear, concise risk and compliance reports for executive and C-suite stakeholders, including prioritised mitigation strategies and improvement roadmaps
Contribute to thought leadership and continuous improvement by staying current with industry developments and sharing knowledge across the cyber security community
Demonstrate strong communication, stakeholder management and mentoring skills, upholding the highest standards of integrity and professionalism

What we offer

A collaborative and supportive environment in which you can grow and develop your career
The tools and opportunity to do work you can be proud of
A chance to work alongside some of the best people in the industry, who always seek to share their knowledge and experience
Hybrid working – we empower you to make smart choices about when and where to work to achieve great results
Industry leading coaching and mentoring
Plus the excellent benefits package we offer at FSP

Fulltime

Cyber Security Principal Consultant

Our client is recruiting for a Cyber Security Principal Consultant to join their...

Location

United Kingdom , London or Birmingham

Salary:

55000.00 - 65000.00 GBP / Year

Broster Buchanan

Expiration Date

Until further notice

Requirements

Experience of working in professional services firms
Demonstrable experience of delivering and leading cyber security advisory and offensive security testing engagements
Demonstrable experience of delivering advisory engagements relevant to security operations and defensive controls
Understand technology trends, cyber threats, and industry issues
Proficient in report writing
Experience with security testing techniques such as threat modelling, reconnaissance, social engineering, enumeration, attack path mapping, exploitation, and clean up from a variety of adversarial perspectives (white/grey/black box testing)
Proficient in infrastructure and web application testing
Proficient in using common commercial and open-source penetration testing tool sets including Kali Linux, Metasploit, Nmap, BurpSuite, Nessus and other industry standard tools
Hold an industry recognised certification (this can be at any level from Offensive Security Certified Professional (OSCP)
CompTIA PenTest+

Job Responsibility

Contributing towards the development of exciting new market facing cyber security products and services and internal knowledge sharing hubs
Delivering cyber security engagements, from scoping through to delivery, debriefs and report writing
Supporting the development of other members of the team
Representing the client in external meetings, including attendance at client workshops, audit committees, and regional networking events
Building trusted relationships with senior client stakeholders and identifying client and service opportunities
Assisting in managing, delivering and leading cyber engagements across a diverse portfolio of clients across the breadth of the mid-market, ensuring both excellent client service and identification of further work opportunities
Managing the delivery of agreed work activities with a primary focus on technical security including offensive security services (OSCP, CompTIA PenTest+)

Fulltime

New

Principal Consultant - Information Security

A specialised consultancy is expanding its team of information security experts....

Location

Germany

Salary:

70000.00 - 110000.00 EUR / Year

Xcede

Expiration Date

May 16, 2026

Requirements

Several years of experience in information security, IT compliance or cyber risk – ideally within consulting or project-based environments
Degree in IT, engineering, business IT or a related field
Strong understanding of common security frameworks and standards
Practical experience in analysing complex systems and explaining risks and controls clearly
Very good communication skills in both German and English

Job Responsibility

Lead or support client projects in information security, IT risk and compliance – covering planning, execution and reporting
Conduct gap analyses and support the implementation of requirements under DORA, NIS2, KRITIS, ISO 27001 or IT-Grundschutz
Evaluate business and IT processes from a risk, efficiency and compliance perspective
Coordinate cyber risk remedation programmes and security governance frameworks
Help clients integrate security into existing processes and IT landscapes, including areas like IAM, SIEM or third-party risk
Build long-term relationships with clients and contribute to developing internal methods and service offerings

Fulltime

Lead Cyber Security Consultant

We have an exciting opportunity for an experienced Cyber Security Consultant to ...

Location

United Kingdom , Glasgow or Reading, Berkshire

Salary:

Not provided

FSP

Expiration Date

Until further notice

Requirements

A broad understanding of cyber threats and their relation to enterprise risk
Experienced in implementing security strategies and programmes that provide value to an organisation
Comfortable leading successful security projects and initiatives
Possess a broad understanding of a range of complex technical and organisational security domains
Familiar with common security technologies and tools
Experienced in developing and maintaining meaningful security metrics and reporting for stakeholders
Possess excellent stakeholder management skills
Able to make key decisions that impact outcomes
Strong alignment with FSP values and ethos
Commitment to teamwork, quality, and mutual success

Job Responsibility

Work closely with Boards, CISOs, Principal Consultants, and Partners to deliver high-quality advisory engagements and strategic guidance
Lead and support the delivery of cyber advisory services, including security assessments aligned to recognised frameworks and the development of targeted improvement programmes
Contribute to business growth by supporting the identification, scoping, proposal, and closure of opportunities across new and existing clients
Actively contribute to security thought leadership through our advisory, publication and social media channels
Assist with the development of new and existing services
Leverage relevant expertise and knowledge to work collaboratively with clients, suppliers, and peers

What we offer

A collaborative and supportive environment in which you can grow and develop your career
The tools and opportunity to do work you can be proud of
A chance to work alongside some of the best people in the industry, who always seek to share their knowledge and experience
Hybrid working – we empower you to make smart choices about when and where to work to achieve great results
Industry leading coaching and mentoring
Competitive salary and an excellent benefits package

Fulltime

Consulting Director

The role of Consulting Director in Unit 42 is a senior-level consulting position...

Location

South Korea , Seoul

Salary:

Not provided

Palo Alto Networks Italia

Expiration Date

Until further notice

Requirements

12+ years of hands-on experience delivering a wide range of cybersecurity consulting services, including at least 4 of the following, for global enterprise customers: Security operations
Digital forensics & Incident response
Offensive Security - Red & purple teaming
Cloud security
Cybersecurity strategy & transformations
Security Architecture & Zero Trust
Cyber crisis management
Cybersecurity risk assessments
Application security (including AI)
Experience as a senior-level team leader including overseeing other principal, senior, and mid-level analyst/consultant teams

Job Responsibility

Partner with the Unit 42 executive team and capability leaders to develop and execute strategy for the Unit 42 practice
Oversee the delivery of our proactive and/or reactive consulting services, ensuring their consistency, quality and highest level of customer service
Provide hands-on, expert-level cybersecurity assessment and transformation services to clients and deliver findings to CxO and/or Board of Directors as required
Work with the BDM and CSM to perform pipeline generation activities
Lead scoping and services overview conversations with clients for prospective engagements in area of expertise, presenting with credibility and authority, clearly articulating various approaches and methodologies to audiences ranging from highly technical to executive personnel
Drive innovation in Unit 42’s offerings, collaborating with consulting and cross-functional teams to bring new capabilities and services to market
Manage the productivity of a team through attainment of utilisation targets
Collaborate with peers and leaders across Unit 42 to drive operational and practice development goals
Recruit, onboard and work to retain world class talent to support our growth goals
Support the professional growth and development of our consultants through training and technical enablement

What we offer

Our development and personal wellbeing programs are designed to give you choice in how you are supported
This includes our FLEXBenefits wellbeing spending account with over 1,000 eligible items selected by employees
Our mental and financial health resources
Our personalized learning opportunities

Fulltime

Principal Consultant - Offensive Security

The Principal Consultant on the Offensive Security team is focused on assessing ...

Location

Japan , Tokyo

Salary:

Not provided

Palo Alto Networks

Expiration Date

Until further notice

Requirements

6+ years of professional experience leading Red & Purple team engagements, Advanced Attack Simulations, OSINT research, social engineering techniques, bespoke security assessments and exploit development
Experience testing a range of technologies (Active Directory, major OSs, cloud environments, IoT / OT) and using a range of security tools and technologies inc AI-enabled to automate and tailor engagements
Demonstrate a deep understanding of how malicious software works (i.e.-malware, trojans, rootkits, etc.)
Ability to modify known and/or craft custom exploits manually without dependence on consumer tools such as Metasploit
Strong knowledge of tools and techniques used to conduct network, wireless, and web application penetration testing
Familiarity with web application penetration testing and code auditing to find security gaps and vulnerabilities
Experience with penetration testing, administering, and troubleshooting major flavors of Linux, Windows, and major cloud IaaS, PaaS, and SaaS providers (i.e., AWS, GCP, and Azure)
Experience with scripting and editing existing code and programming using one or more of the following - Perl, Python, ruby, bash, C/C++, C#, or Java
Experience with security assessment tools, including Nessus, OpenVAS, MobSF Metasploit, Burp Suite Pro, Cobalt Strike, Bloodhound, and Empire
Knowledge of application, database, and web server design and implementation

Job Responsibility

Performs client penetration testing to find any vulnerabilities or weaknesses that might be exploited by a malicious party, using open-source, custom, and commercial testing tools - Red Team experience essential
Ability to assist in scoping engagements by clearly articulating various penetration approaches and methodologies to audiences ranging from highly technical to executive personnel
Report generation that clearly communicates testing and assessment details, results, and remediation recommendations to clients
Develop scripts, tools, and methodologies to automate and streamline internal processes and engagements
Conducts periodic scans of networks to find and detect vulnerabilities
Conducts IT application testing, cybersecurity tool and systems analysis, system and network administration, and systems engineering support for the sustainment of information technology systems (mobile application testing, penetration testing, application, security, and hardware testing)
Conduct threat hunting and/or compromise assessment engagements to identify active or dormant indicators of compromise (IoCs) using Crypsis and Palo Alto Networks’ threat hunting tools (and/or client owned hunting instrumentation where applicable)
Conduct cloud penetration testing engagements to assess specific workloads (i.e., AWS, GCP, Azure, containers, or other PaaS and SaaS instances) for vulnerabilities and subsequently attempt to exploit identified weakness after receiving permission from client stakeholders
Provide recommendations to clients on specific security measures to monitor and protect sensitive data and systems from infiltration and cyber-attacks including response and recovery of a data security breach
Ability to perform travel requirements as needed to meet business demands

Fulltime

Principal Consultant, Zero Trust Advisory, Proactive Services (Unit 42)

In this client-facing role, the Principal Consultant will lead complex Zero Trus...

Location

Canada , Toronto

Salary:

151000.00 - 208000.00 USD / Year

Palo Alto Networks Italia

Expiration Date

Until further notice

Requirements

6+ years leading high-stakes cybersecurity advisory and risk management engagements for enterprise clients
Former professional services and consulting experience required
3+ years of consulting experience architecting and deploying Zero Trust, SASE, or Identity-centric security models for large, multinational organizations
Strong track record in strengthening existing and developing net-new client relationships
Lead enterprise Zero Trust advisory engagements, translating business risk into actionable architectures aligned with NIST SP 800-207, NIST NCCoE Zero Trust use cases, and CISA Zero Trust Maturity Model
Design and deliver end-to-end Zero Trust architectures across IAM, network, endpoint, cloud, application, and security operations domains for large, complex enterprises
Perform enterprise security and architecture assessments to identify gaps, dependencies, and maturity levels, producing clear roadmaps toward an optimized Zero Trust posture
Serve as a trusted advisor to C-suite executives, board members, and senior leadership, while also engaging deeply with engineers, architects, and security operations teams
Create high-quality client-ready deliverables including reference architectures, target-state designs, migration roadmaps, executive presentations, and technical runbooks
Demonstrate solution architecture leadership, maintaining technical vision from strategy through detailed design and implementation

Job Responsibility

Drive high-value, billable Zero Trust transformation engagements that convert complex security challenges into resilient architectural outcomes
Simultaneously deliver elite advisory services to our clients and assist in scaling Unit 42’s Zero Trust practice through technical innovation and business development
Assess enterprise architectures to expose hidden zones of implicit trust and high-risk lateral movement paths
Analyze enterprise telemetry and policy logs to identify visibility gaps across identity, device, and network layers
Execute Zero Trust risk assessments grounded in best practices such as NIST SP 800-207, the CISA ZT Maturity Model, and MITRE ATT&CK to quantify architectural vulnerabilities
Devise strategic security transformation recommendations and solutions, to include Unit 42 services and Palo Alto Networks technology, to assist customers in reducing risks
Design risk-based control sets that prioritize identity-centric protection and least-privilege access
Audit the technical integration of SASE, Identity, EDR/XDR, and Cloud Security to ensure they function as a unified, automated fabric rather than a collection of disconnected silos
Develop ZT Roadmaps that provide clients with a realistic, phased path to retiring legacy perimeter defenses
Scope new opportunities with prospective clients, including drafting statements of work and responding to Requests for Proposals (RFPs)

What we offer

restricted stock units
bonus
employee benefits

Fulltime

Principal Cybersecurity Incident Analyst

The Principal Analyst Cybersecurity Incident is a key role responsible for manag...

Location

Australia , Melbourne

Salary:

Not provided

NTT DATA

Expiration Date

Until further notice

Requirements

Bachelor's degree in Information Technology or Computer Science preferred
Relevant certifications such as SANS GIAC Security Essentials (GSEC)
At least 5 years of experience in the technology information security industry
Hands-on experience in administering & managing SIEM platforms Palo Alto XSIAM, Splunk, Microsoft Sentinel etc.
Hands-on experience to Analyse logs/events from SIEM solution, wireshark and other infrastructure
Deep knowledge of cybersecurity concepts, technologies, and best practices
Experience in working in Security Operation Centre and Network Security operations
Hands-on experience in administering & managing Vulnerability Management solutions like Qualys, Tenable etc.
Hands-on experience in administering & managing SOAR Palo Alto Cortex XSOAR or other SOAR solutions
Expertise in writing new and interpreting query language SPL, KQL, XQL

Job Responsibility

Act like a SIEM consultant who provides expertise and guidance to organizations in setting up, managing, and improving their SOC capabilities
Look over dashboards, and reports from the previous day or shift, including checking for any new threats and identifying malware
Prepare for and respond to system breaches or attacks
Respond to hacks or network insecurities and working to prevent new ones
Participate in a shift roster which may comprise of shifts business hours and after hours
Assessing SIEM maturity: Evaluating the existing SIEM setup and capabilities of an organization
Developing or refining the SIEM infrastructure, the architecture, tools, processes, and workflows of a SOC
Implementing security technologies when necessary: Assessing, selecting, and implementing various security technologies such as SIEM, SOAR systems, intrusion detection systems, threat intelligence platforms, and incident response tools
Support the Security Management Lifecycle including: monitoring, investigation, research, correlation, trend analysis, remediation and siem configuration
Developing security policies and procedures: Assisting in developing, documenting, maintaining SOC standard operating procedures (SOPs), incident response plans, playbooks, and other security policies

Fulltime

Principal Cyber Security Consultant

FSP

Location:
United Kingdom , Glasgow or Reading, Berkshire

Category:
IT - Administration

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:
April 16, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Principal Cyber Security Consultant

Senior Security Consultant

Cyber Security Principal Consultant

Principal Consultant - Information Security

Lead Cyber Security Consultant

Consulting Director

Principal Consultant - Offensive Security

Principal Consultant, Zero Trust Advisory, Proactive Services (Unit 42)

Principal Cybersecurity Incident Analyst

Principal Cyber Security Consultant

FSP

Location:United Kingdom , Glasgow or Reading, Berkshire

Category:IT - Administration

Contract Type:Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:April 16, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Principal Cyber Security Consultant

Senior Security Consultant

Cyber Security Principal Consultant

Principal Consultant - Information Security

Lead Cyber Security Consultant

Consulting Director

Principal Consultant - Offensive Security

Principal Consultant, Zero Trust Advisory, Proactive Services (Unit 42)

Principal Cybersecurity Incident Analyst

Location:
United Kingdom , Glasgow or Reading, Berkshire

Category:
IT - Administration

Contract Type:
Not provided

Job Posted:
April 16, 2026