Moore Kingston Smith LLP

Cyber Security Consultant (Penetration Tester) Department: Cyber Employment Type: Permanent - Full Time Location: City, London Compensation: £45,000 - £55,000 / year Description Moore Kingston Smith is seeking an experienced Cyber Security Consultant specialising in penetration testing to join our client-facing advisory team. You will join an NCSC-recognised cyber security team within our Risk Advisory practice, supporting a diverse portfolio of clients across multiple sectors. This is a hands on role focused on delivering penetration tests across web applications, APIs, and internal and external network infrastructure. You will also support Cyber Essentials Plus assessments and wider technical security reviews, including vulnerability assessments, configuration reviews against recognised benchmarks, and cloud security reviews. You will identify and safely validate security weaknesses, explain the associated business risks clearly, and provide practical remediation advice tailored to each client. Technical delivery will account for at least 70% of the role and will remain the core focus. Depending on your experience, interests and business requirements, there may also be opportunities to contribute to broader cyber security engagements, including cyber maturity assessments, security control reviews, audit readiness activities and security design advisory work. Typically, this would represent up to 30% of your time and provides an opportunity to broaden your consulting expertise while supporting clients across a wider range of security challenges. We are looking for a proactive consultant with strong technical fundamentals, sound professional judgement and a genuine interest in helping clients improve their security posture. This role offers the opportunity to deepen your offensive security expertise while contributing to the continued growth of a collaborative and commercially focused cyber security practice. Key Responsibilities Lead and support penetration testing engagements across web applications, APIs, and internal and external network infrastructure. Work with clients to define objectives, agree scope and rules of engagement, and plan testing that meets their assurance needs. Apply manual and tool assisted testing techniques aligned with recognised methodologies and frameworks, including the OWASP Web Security Testing Guide, PTES, and MITRE ATT&CK. Deliver Cyber Essentials Plus assessments, including scoping, conducting the required technical tests, verifying remediation and supporting clients through to certification in line with current NCSC and IASME scheme requirements. Deliver wider technical security assessments, including vulnerability assessments, cloud security reviews, and build and configuration reviews against CIS Benchmarks and vendor hardening guidance. Produce clear, high quality deliverables and present findings to technical and non technical stakeholders. Apply appropriate risk ratings, explain business impact, and support clients with remediation and retesting. Support general advisory engagements such as cyber risk assessments, security control reviews, audit readiness, remediation planning and security design advice. Build strong client relationships and contribute to business development, supporting proposals, scoping, tenders and thought leadership, and identifying opportunities to expand our services. Maintain current knowledge of the threat landscape, emerging attack techniques, testing methodologies, and scheme requirements, while contributing to peer review and quality assurance. Contribute to the continuous improvement of our methodologies, tooling, delivery processes, and technical capability. Skills, Knowledge and Expertise Essential Professional experience delivering client facing penetration tests across web applications, APIs, and internal or external network infrastructure, independently and/or as part of a team. Strong manual testing capability and sound judgement in selecting and using automated tools, with practical experience of Kali Linux, Burp Suite, Nmap, and Qualys or Nessus. Familiarity with recognised penetration testing methodologies and frameworks, together with the ability to script or automate tasks using Python, PowerShell, Bash, or a comparable language. Good knowledge of modern web architecture, common web and API vulnerabilities, TCP/IP, Windows and Linux security, and Active Directory and Microsoft Entra ID attack paths. Experience delivering, or the ability to deliver, wider technical assessments such as vulnerability assessments and configuration reviews against recognised benchmarks such as CIS. Working knowledge of the Cyber Essentials and Cyber Essentials Plus schemes. Existing assessor experience is beneficial; appropriate training will be provided where required. Ability to manage engagements within agreed scope, rules of engagement, timescales, budget, and quality standards, while maintaining clear testing evidence and protecting client systems and data. Strong written communication skills, including the ability to produce clear, accurate, and actionable technical reports. Strong verbal communication and stakeholder management skills, with the ability to explain technical findings, risk, and business impact to technical and non technical audiences. A proactive, client oriented mindset and a commitment to continuous learning, confident working with clients ranging from SMEs and scale ups to larger enterprises. Desirable A recognised practical penetration testing certification, such as CREST CRT, OSCP, OSWE, CSTM or an equivalent qualification. Experience in additional testing disciplines such as mobile application, wireless or cloud penetration testing, or phishing and social engineering assessments. Experience with public cloud and SaaS platforms such as AWS, Azure, GCP or Microsoft 365, or hands on security or IT engineering experience such as hardening systems and implementing technical controls. An interest in, or experience of, broader advisory work such as cyber risk assessments, security control reviews, audit readiness, or working knowledge of a recognised framework such as ISO/IEC 27001, NIST, or CIS Controls. Benefits

Moore Kingston Smith LLP in London is seeking an experienced Cyber Security Consultant specialising in penetration testing to join our client-facing advisory team. You will deliver hands-on testing across web applications, APIs, and network infrastructure, and support Cyber Essentials Plus assessments. You will apply recognised methodologies, produce high-quality deliverables, and explain risks to both technical and non-technical stakeholders while developing strong client relationships and

Cyber Security Consultant Department: Cyber Employment Type: Permanent - Full Time Location: City, London Compensation: £42,000 - £50,000 / year Description As part of our continued growth and increasing demand for cyber and information security services, Moore Kingston Smith is seeking an experienced Cyber Security Consultant to join our Risk Advisory team. You will be part of an NCSC-recognised cyber security practice, operating within our wider business, technology and compliance risk advisory team, helping clients strengthen their cyber resilience and manage evolving security risks. This is a hands on consulting role that will see you working with a wide variety of organisations, ranging from scale ups to established businesses across multiple sectors. Whether clients are just beginning their security journey or enhancing mature programs, you will provide tailored, actionable advice to support their operational resilience and regulatory compliance. With access to a diverse portfolio of clients, this is an excellent opportunity to deepen your InfoSec expertise and play a meaningful role in helping businesses improve their defences in a fast evolving threat landscape. We are looking for a proactive well rounded consultant with strong technical fundamentals, an ability to think critically, and a genuine interest in helping clients succeed. Key Responsibilities Lead and support the delivery of cyber and information security assessments, audits, and control reviews across diverse industries. Identify and assess security control weaknesses, articulate associated risks, and provide pragmatic recommendations tailored to client environments. Produce high quality, concise documentation including audit reports, risk assessments, and advisory outputs. Collaborate with technical and business stakeholders to design or enhance security control environments aligned to frameworks such as ISO 27001, NIST CSF, CIS Controls, and Cyber Essentials. Maintain up to date knowledge of cyber threats, mitigation strategies, regulatory requirements, and industry best practices. Contribute to the continuous improvement of internal methodologies and security services. Build and maintain strong client relationships with a service focused mindset. Identify client challenges and future needs that may lead to service expansion opportunities. Contribute to business development and client growth by supporting proposal creation, project scoping, thought leadership (e.g., blogs, webinars), and collaborating on presentations, tenders, and workshops with senior team members. A proactive, client oriented mindset with a passion for continuous learning and improving security outcomes. Skills, Knowledge and Expertise Essential Experience within cyber security consulting, security auditing, or risk advisory roles. Experience in delivering client facing cyber risk advisory services. Experience delivering assessments aligned with industry standards such as ISO 27001, NIST, CIS, NCSC 10 Steps, and GDPR. Strong written and verbal communication skills, able to clearly articulate technical jargon to non technical audiences and write impactful deliverables. Experience planning and delivering engagements independently and as part of a team, within tight timescales, to budget and a high level of quality. Competent in working with a range of clients, from SMEs to large enterprise environments. Experience preparing, supporting, or auditing certification audits (e.g., ISO 27001, SOC 2, Cyber Essentials) Desirable Industry recognised certifications such as ISO 27001 Lead Auditor/Implementer, CISSP, CISA, CISM, or similar. Exposure to penetration testing, or hands on vulnerability assessment (even if not a primary role). Experience with public cloud platforms (e.g., AWS, Azure, GCP, MS365) and understanding of cloud security principles. Experience in Operational Technology (OT) and understanding of SANS standards. Familiarity with modern security technology and tools, SIEM, and security automation. Hands on experience in security or IT engineering, including implementing technical controls, hardening systems, securing networks, or supporting secure architecture design. Benefits

Moore Kingston Smith LLP is seeking an experienced Cyber Security Consultant to join our Risk Advisory team in London. This hands-on role involves delivering cyber and information security assessments for a diverse client base, helping organisations strengthen resilience and regulatory compliance. You will work across sectors, design and implement security controls, and contribute to thought leadership and client workshops, with opportunities to grow your InfoSec expertise within a recognised

Data Administrator - Tronc services Department: WMT Troncmaster Services Employment Type: Permanent - Full Time Location: St Albans Compensation: £30,000 / year Description We are looking for a detail focused Data Administrator (Tronc Administrator) to join our growing Employer Services team at WMT Troncmaster Services, part of Moore Kingston Smith. WMT Troncmaster Services is one of the UK's leading providers of tronc solutions to the hospitality sector. We work with an impressive portfolio of clients including Michelin starred restaurants, celebrity chefs, high street hospitality groups and 5 star hotels, helping them manage the fair and compliant distribution of tips and service charges. What is a tronc solution? A tronc solution (also known as a tronc system, scheme or arrangement) allows service charges and credit card tips to be collected and distributed fairly to hospitality staff. No prior tronc experience is required - full training on our systems, processes and legislation will be provided. Key Responsibilities Calculate tips, service charges, and other gratuities for employees across high profile UK hospitality venues. Process and analyse client provided data to ensure accurate and timely distribution of awards. Manage tronc related budgets following completion of training. Respond to client queries and maintain clear, professional communication with businesses. Use IT systems extensively, including Microsoft Excel, Word, Outlook, and internal software tools. Skills, Knowledge & Expertise Strong numerical aptitude with the ability to interpret and work confidently with data. Excellent attention to detail and ensuring work is completed accurately and with care. Proficient in Microsoft Office, particularly Excel, Outlook and Word. Working knowledge of Excel formulas, including IF and LOOKUP formulas as well as Pivot Tables. Commercially focused and professional in communication and conduct. A Level (or equivalent) in Maths and GCSE English (A-C). Personal Attributes Flexible, adaptable and able to manage multiple tasks simultaneously. Highly customer focused with a professional, personable communication style. Quick learner with the ability to pick up new systems and processes. Strong team player who contributes positively to a supportive environment.

Moore Kingston Smith LLP is looking for a detail-focused Data Administrator to join their WMT Troncmaster Services in St Albans. This permanent, full-time role involves calculating tips and service charges as well as processing client data for accurate distribution. The successful candidate will have strong numerical skills, excellent attention to detail, and proficiency in Microsoft Office, particularly Excel. No prior tronc experience is required, as full training will be provided.