Prós
Great opportunity to get exposure in IT security niche engagements. Working with mid level management of FTSE 250 companies. Very hands-on learning, where you are thrown into the client environment with minimal support - leading to a sink or swim outcome.
Contras
Immature consultancy approach, heavily relient on the individual. Professional training is available but limited to QSA and CHECK, and be prepred to pay a tapering proportion if you exit early. The business is transforming from simple vulnerability/penetration/technical security testing boutique to small mid player PCI DSS niche consultancy, so collateral and back end process/support sytems are still in infancy or non existent. Sales is king, and hand to mouth selling is unavoidable, including services outside of core competency - placing the professional under significant pressure to perform.