At a Glance
- Tasks: Lead security design reviews and risk assessments for innovative tech solutions.
- Company: Join a $13+ billion global tech leader with a startup mindset.
- Benefits: Enjoy competitive pay, 20 days vacation, and diverse employee benefits.
- Other info: Be part of a supportive team focused on total wellbeing and professional growth.
- Why this job: Make a real impact in cyber security while working on exciting projects.
- Qualifications: Experience in cyber security and strong stakeholder management skills required.
The predicted salary is between 60000 - 80000 £ per year.
We are seeking a Senior Security Design Consultant to provide expert cyber security consultancy, security design assurance and risk-based guidance across business and technology change. The role is responsible for assessing new and amended services, applications, cloud platforms and third-party solutions to ensure security risks are understood, controlled and aligned to organisational risk appetite, regulatory obligations and industry best practice.
Key Responsibilities
- Lead security design reviews, threat modelling and risk assessments for applications, infrastructure, cloud services and third-party solutions.
- Define and recommend proportionate security controls, patterns and design guardrails aligned to business objectives and risk appetite.
- Provide consultancy on secure architecture for internet-facing services, internal platforms, data flows and integration patterns.
- Advise on identity and access management, privileged access, recertification and access control design.
- Work closely with engineering, architecture, product and delivery teams in Agile and DevOps environments to embed security by design.
- Support compliance with security and regulatory frameworks including ISO 27001, PCI DSS, OWASP and internal standards.
- Review security posture of vendors and outsourced services, providing due diligence and third-party risk assurance.
- Present security findings, risk opinions and design recommendations clearly to both technical and non-technical stakeholders, including senior leadership.
Required Experience and Skills
- Extensive experience in cyber security, security consulting, risk assessment or security architecture within regulated environments, ideally financial services.
- Strong knowledge of threat modelling methodologies, secure design principles, attack vectors and mitigating controls across network, application and cloud domains.
- Practical understanding of cloud security, secure application delivery, third-party risk management and access management practices.
- Experience applying recognised frameworks and standards such as ISO 27001, PCI DSS, OWASP, NIST and enterprise security control frameworks.
- Ability to translate complex technical risks into business language and provide clear, evidence-based recommendations.
- Exposure to contemporary architectures, e.g. RESTful APIs and containerised microservices.
- Strong stakeholder management, written communication and presentation skills, with confidence engaging senior managers and control functions.
Qualifications and Certifications
- Essential: Demonstrable experience in security design, cyber risk, security consulting or related cyber security disciplines.
- Desirable: Professional certifications such as CISSP, CISM, CCSP, CEH, GIAC or equivalent.
- Preferred background: Experience supporting cloud transformation, digital delivery, third-party assurance and regulated change programmes.
Desirable Attributes
- Commercially aware and able to balance risk reduction with pragmatic business delivery.
- Capable of working independently while influencing multidisciplinary teams and senior stakeholders.
- Understanding or awareness about banking systems.
- Comfortable operating in fast-paced, high-pressure environments with changing priorities.
- Structured, detail-oriented and focused on producing high-quality, repeatable outcomes.
Success Measures
Success in this role will be measured by the quality and timeliness of security assessments, the effectiveness of recommended controls, stakeholder confidence in security advice, and the consultant’s ability to enable secure delivery without unnecessary friction to business change.
Benefits
- A supportive, diverse, and global team with a brilliant culture.
- Competitive compensation and benefits that includes up to 20 days’ vacation per year, various insurances like Term life and Business Travel insurance.
- Great opportunities to make the role your own, upskill yourself and get involved with exciting projects.
- Total Wellbeing is our focus. Alongside your professional excellence, you join likeminded colleagues to create a larger impact within the company and society at large in your chosen area of passion.
Security Design Consultant in Newport employer: HCLTech
HCLTech is an exceptional employer that fosters a supportive and diverse work culture, encouraging employees to find their spark and drive meaningful change. With competitive compensation, generous vacation allowances, and a focus on total wellbeing, employees have ample opportunities for professional growth and involvement in impactful projects. The hybrid work model in vibrant cities like Manchester, Leeds, and Bristol further enhances the work-life balance, making it an attractive place for those seeking a fulfilling career in cyber security.
StudySmarter Expert Advice🤫
We think this is how you could land Security Design Consultant in Newport
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including HCLTech, love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through HCLTech
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at HCLTech. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace Security Design Consultant in Newport
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at HCLTech insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to HCLTech that you’re committed to staying ahead in the game.
How to prepare for a job interview at HCLTech
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at HCLTech to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at HCLTech.
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.
