New to cyber security consulting - is this normal or am I in a bad consultancy?

Hey everyone,

I’m fairly new to cyber security consulting and recently joined what’s generally considered a reputable company. I was excited going in, but after a few months I’m feeling pretty uneasy and wanted to sanity-check my experience with people who’ve been around longer.

Some of the things that are bothering me:

• Training has been entirely death by PowerPoint, delivered by a senior consultant, with nothing hands-on or practical
• Very limited guidance from senior team members while actually on engagements
• No mentorship at all
• Internal documentation and checklists are honestly shocking. They're outdated and shallow
• A strong "if it ain’t broke, don’t fix it" mindset from seniors, even when better tools, processes, or approaches clearly exist
• Overall it seems like the company is putting band-aids on bigger issues rather than solving the root causes

What worries me most is that there doesn’t seem to be much effort put into helping juniors grow or really learn the ropes. I’m scared I’ll get stuck here, not develop strong fundamentals, and hurt my long-term career without realising it until it’s too late.

So my questions are:

• Is this kind of experience normal in cyber security consultancies in the UK?
• What does a good consulting environment for juniors actually look like, and are there any consultancies you’d genuinely recommend?
• How much responsibility should be on me vs the company to learn the ropes? I have some certs and prior background so I’m not lost at work, but the lack of structure and support feels pretty glaring
• At what point is it reasonable to say "this isn’t the right place" and start looking elsewhere?

Would really appreciate honest perspectives from people who’ve been in consulting for a while.

Thanks!