Cyber Security Consultant

DCG is a recruitment company that undertakes numerous recruitment projects and supports businesses with experienced professionals.

• Understanding of cybersecurity principles and common threat landscape
• Ability to explain security vulnerabilities and assess their technical and business impact
• Familiarity with vulnerability severity classification and prioritization methodologies
• Knowledge of CVSS and its application in vulnerability risk assessment
• Understanding of vulnerability remediation processes and risk reduction practices
• Hands-on experience with vulnerability assessment tools such as Qualys, Tenable Nessus, Rapid7, OpenVAS, or similar
• Understanding of vulnerability scanner capabilities, limitations, and common use cases
• Ability to investigate and research vulnerabilities using CVE databases, NVD, vendor advisories, and security bulletins
• Knowledge of vulnerability prioritization based on severity, exploitability, asset criticality, and business impact
• Basic understanding of security risks related to AI systems, AI agents, LLMs, and AI-enabled applications
• Awareness of AI-related vulnerabilities including prompt injection, data leakage, excessive permissions, insecure integrations, and autonomous agent risks
• Understanding of networking concepts including TCP/IP, DNS, DHCP, routing, firewalls, proxies, and network segmentation
• Ability to troubleshoot basic network connectivity and communication issues
• Good understanding of Microsoft Windows and Linux operating systems
• Familiarity with system administration fundamentals and security best practices
• Ability to perform basic administrative tasks in Windows and Linux environments
• Knowledge of common Linux commands including grep, find, ps, netstat/ss, chmod, chown, journalctl, and systemctl
• Basic PowerShell knowledge for administrative and information-gathering activities
• Ability to analyze logs and collect troubleshooting information from operating systems
• Very good command of English, both spoken and written

Nice to have:

• Experience working in security operations, vulnerability management, risk management, or infrastructure support teams
• Familiarity with security frameworks and standards such as NIST, CIS Controls, ISO 27001, or OWASP
• Security certifications such as CompTIA Security+, CompTIA CySA+, SC-900, AZ-500, or similar

• Perform vulnerability assessments using approved security scanning tools such as Qualys, Tenable Nessus, Rapid7, OpenVAS
• Analyze and investigate identified security vulnerabilities
• Research vulnerabilities using CVE databases, NVD, vendor advisories, and security bulletins
• Support vulnerability prioritization based on severity, exploitability, asset criticality, and business impact
• Contribute to vulnerability remediation and risk reduction activities
• Analyze operating system and security logs for troubleshooting purposes
• Collect and evaluate technical information from Windows and Linux environments
• Support basic security and infrastructure investigations involving network, operating system, and security-related issues
• Identify and assess security risks related to AI-enabled applications, LLMs, and AI agents