Home Industries MSSPs, vendors & consultancies
MSSPs, VENDORS & CONSULTANCIES
Cyber security recruitment for MSSPs, vendors and consultancies
Service providers hire differently from everyone else. The role is billable or quota-carrying, the client changes every few months, and the person has to be credible in front of someone who is paying for the hour. That filters out a lot of otherwise strong candidates.
What these teams hire
- BILLABLE CONSULTANTS
- Testers, incident responders and GRC consultants working multiple client environments a year.
- MANAGED SOC
- Multi-tenant analyst and detection engineering teams, usually shift-based and volume-driven.
- PRE-SALES
- Solution engineers who can demonstrate the product and survive the technical objection.
- SALES & CHANNEL
- Account executives, channel managers and country leads for vendors and distributors.
- SERVICE DELIVERY
- Delivery and practice leads who own utilisation, quality and the client relationship at once.
- PRODUCT & ENGINEERING
- Platform and detection engineering inside vendors building the tooling everyone else buys.
What is different about hiring here
The screen is commercial as much as technical. We ask candidates directly about billable targets, utilisation, timesheets and multi-client context, because plenty of good in-house engineers discover in month two that they dislike all four. We also ask about client-facing writing, since in a service business the report is the product.
Retention is the other half. Service providers lose people to their own clients, which is a compliment and a problem. We screen for what a candidate actually wants from a consultancy — variety, exposure, pace — and we are honest with candidates about the trade-off, because a placement that ends in six months serves nobody.
The market, honestly
South Africa has a real advantage here: strong English, favourable time zone overlap with Europe, and a labour cost base that makes offshore delivery centres viable. That has built genuine depth in Cape Town and Johannesburg for managed SOC and consulting delivery, and it is the reason a lot of our work sits with providers rather than end clients.
In the UK, competition for CREST and CHECK-aligned testers and for experienced responders is intense, and vendors compete for the same pre-sales engineers as everyone else. Where the pool is genuinely empty we will say so, and where a strong in-house candidate could convert to consulting we will make that case.
Utilisation targets, on-call and travel expectations belong in the first conversation, not the offer. They are the three things that reverse a service-provider acceptance.
Where we recruit
Cape Town and Johannesburg across South Africa, and London and the wider United Kingdom.
Common questions
Do you recruit for offshore delivery centres in South Africa?
Yes, and it is a significant part of our work. Cape Town in particular has depth in managed security operations built for overseas parents, and we understand how those teams are structured and paid.
Can you recruit commercial roles as well as technical ones?
Yes. Sales, pre-sales, channel and customer success for security vendors and MSSPs is a distinct practice for us, and the same market knowledge applies.
How do you assess consultancy fit?
By asking about billable reality, client-facing writing and multi-client context explicitly, and by treating a candidate who has never worked to utilisation as a risk to be discussed rather than hidden.
Do you place contract and associate consultants?
Yes, including associate testers and responders used for peak demand. Rates and availability move quickly in this part of the market and we advise on both.
Explore further
Talk to us about your search
A short conversation is usually enough to tell you whether we can help.