How to be a security consultant – the job role