Security Consultant

We are currently supporting a client in the search for an experienced Security Consultant to support their Cyber Security function. This is an excellent opportunity to work within a high-profile security consultancy and design team, contributing to the delivery of secure-by-design solutions across a large-scale transformation portfolio.

Location: Edinburgh, Leeds, Halifax, Manchester or Bristol (please specify preferred client location when applying)

Hybrid Working: 2 days per week onsite at client location

Rate: Up to 450 per day (Inside IR35)

The successful candidate will play a key role in shaping security strategy, assessing cyber risks and ensuring robust security controls are embedded across modern technology platforms and cloud-native environments.

• Develop secure solution designs and produce detailed security design documentation
• Review and deconstruct solution and network architectures to identify security risks
• Conduct threat modelling and assess vulnerabilities using industry-standard methodologies such as STRIDE and MITRE
• Translate technical threats into business risks, supporting stakeholders with likelihood and impact assessments
• Provide clear security guidance to both technical and non-technical stakeholders
• Support security decision-making across multiple concurrent projects
• Evaluate and recommend appropriate security controls and design approaches
• Ensure security standards and regulatory requirements are considered throughout delivery lifecycles

• Proven background delivering security consultancy services, including threat modelling, secure design and influencing security decisions
• Strong understanding of cloud-native platforms and modern architectures
• Experience applying a security-led approach rather than infrastructure-led responses
• Strong risk-based mindset with the ability to link threats, risks and controls across end-to-end systems
• Practical knowledge of security controls and their implementation
• Experience working with security standards and regulatory frameworks such as PCI DSS and data protection requirements
• Strong end-to-end security design capability
• Ability to demonstrate ownership and contribution to security decisions within projects

• Knowledge of security frameworks and standards including ISO 27001, PCI DSS, COBIT, NIST and OWASP
• Relevant certifications such as CISSP, CISM, CCSP, CEH or OSCP
• Experience working within public and/or private cloud environments

This is an excellent opportunity for a Cyber Security professional seeking to work on large-scale transformation initiatives within a fast-paced and collaborative environment.

We practice a diverse and inclusive recruitment process that ensures equal opportunity for all we work with, irrespective of race, sexual orientation, mental or physical disability, age or gender. As an organisation, we encourage applications from all backgrounds and will ensure measures are met when required, to allow a fair process throughout.

PLEASE NOTE: We can only consider applications from candidates who have the right to work in the UK.