Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Target Resume Now
Tailor your resume to this Senior Cyber Security Consultant role.
Rezi rewrites your resume against Aon Corporation's job description. Free.
Tailor your resume to this Senior Cyber Security Consultant role.
Rezi rewrites your resume against Aon Corporation's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Senior Cyber Security Consultant posting at Aon Corporation — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Senior Cyber Security Consultant posting at Aon Corporation — free, in seconds.
About the Role
The Digital M&A Advisory practice advises clients on technology, IT, cyber, and digital risks across acquisitions, portfolio companies, and strategic transformation initiatives. This role is for a technically strong security professional with a background in offensive security to assess client environments, identify exposures, and communicate cyber risk to stakeholders.
Responsibilities
- Lead technical cyber security reviews as part of cyber due diligence, technical review, and portfolio company engagements.
- Assess client environments from an adversary’s perspective, identifying realistic attack paths across identity, network, cloud, endpoint, and application layers to critical business assets.
- Review external attack surface and internet-facing exposure using passive and non-intrusive reconnaissance techniques and threat intelligence.
- Evaluate the effectiveness of security controls against known attacker tactics, techniques, and procedures, mapped to MITRE ATT&CK.
- Interpret and challenge the results of client penetration tests, red team exercises, and vulnerability assessments, assessing scope, quality, remediation status, and residual risk.
- Assess detection and response maturity, including SOC capability, alerting coverage, and incident response readiness against realistic threat scenarios.
- Develop threat-led risk scenarios tailored to a client’s sector and business model.
- Advise on the scoping and procurement of offensive security testing for portfolio companies and help clients derive value from those exercises.
- Translate technical findings into prioritized, commercially relevant risks, remediation roadmaps, and cost estimates for investors and management teams.
- Produce high-quality reports, presentations, and executive briefings.
- Manage technical workstreams and support engagement delivery across multiple concurrent projects.
- Collaborate with colleagues across technology, cyber, M&A, and risk advisory disciplines, acting as a technical sounding board for the wider team.
- Contribute to the development of the team's technical review methodologies, threat-led assessment approaches, and market offerings.
- Support client engagements across the UK and EMEA.
Requirements
- Demonstrable experience in red teaming, penetration testing, adversary simulation, or offensive security, gained in a consultancy, in-house, or government setting.
- Strong, practical understanding of how attackers gain initial access, escalate privileges, move laterally, and achieve objectives in enterprise environments.
- Genuine interest in moving from hands-on testing into advisory, risk-focused, and client-facing work.
- Offensive experience across one or more of the following: Active Directory and Entra ID attack techniques, Infrastructure and internal network testing, Cloud security testing (Azure, AWS and/or Google Cloud), External attack surface and perimeter testing, Web application and API security, Social engineering and phishing simulation, Endpoint and EDR evasion techniques, OT/ICS security testing.
- Familiarity with one or more of the following frameworks and methodologies: MITRE ATT&CK, CBEST, TIBER-EU and/or STAR-FS threat intelligence-led testing frameworks, CHECK and CREST testing standards, NIST CSF, CIS Critical Security Controls, ISO 27001.
- Understanding of defensive controls and security operations, and the ability to assess their real-world effectiveness against attacker behaviour.
- Ability to quickly understand unfamiliar environments and identify the exposures that most matter to the business.
- Experience identifying and assessing cyber risks within sophisticated environments, with the ability to communicate technical findings and business implications to both technical and non-technical stakeholders.
- Strong analytical and problem-solving skills.
- Commercial awareness and the ability to understand business implications of technology and security decisions.
- Excellent written and verbal communication skills with the ability to convey sophisticated technical concepts to non-technical audiences.
- Experience managing technical workstreams and contributing to successful project delivery.
- Strong stakeholder management and presentation skills.
- Ability to engage effectively with both technical teams and senior business executives.
- Experience developing positive client relationships.
- Comfortable working within multidisciplinary and global teams and fast-paced consulting environments.
- Ability to manage multiple engagements and competing priorities.
- Highly organised with strong attention to detail and quality.
- Experience scoping, leading, or quality-assuring red team or penetration testing engagements.
- Exposure to attack path analysis, exposure management, or cyber risk quantification platforms.
- Experience in threat intelligence, purple teaming, or detection engineering.
- Experience writing executive-level reports or debriefing senior stakeholders on testing outcomes.
- Experience working with private equity-backed businesses or large corporate organisations.
- Experience mentoring junior team members or supporting team development initiatives.
- Interest in business development and market-facing activities.
- Interest in supporting client relationship management.
Skills
- Red teaming
- Penetration testing
- Adversary simulation
- Offensive security
- Active Directory and Entra ID attack techniques
- Infrastructure and internal network testing
- Cloud security testing (Azure, AWS and/or Google Cloud)
- External attack surface and perimeter testing
- Web application and API security
- Social engineering and phishing simulation
- Endpoint and EDR evasion techniques
- OT/ICS security testing
- MITRE ATT&CK
- CBEST
- TIBER-EU
- STAR-FS
- CHECK
- CREST
- NIST CSF
- CIS Critical Security Controls
- ISO 27001
- Defensive controls
- Security operations
- Threat intelligence
- Purple teaming
- Detection engineering
- Attack path analysis
- Exposure management
- Cyber risk quantification
- Stakeholder management
- Presentation skills
- Client relationship management
- Business development
Location
- London
Work Type
- Full-time
Experience Level
- Senior
Education Level
- Industry-recognised certifications, such as: CREST CCT Inf / CCT App / CCSAS / CCSAM, OSCP / OSEP / OSCE3, CRTO / CRTL, GIAC GPEN / GXPN, CHECK Team Leader or Team Member, CISSP
About the Company
- Headquartered in London, Aon Plc is a leading global professional services firm providing a broad range of risk, retirement, and health solutions.
- Our 50,000 colleagues in 120 countries empower results for clients by using proprietary data and analytics to deliver insights that reduce volatility and improve performance.
Equal Opportunity
- Aon is an equal opportunities employer.
- Aon's recruitment and selection policy ensures the best possible skill mix of colleagues and the highest quality candidates are appointed using objective job-related criteria.