Cyber Security Consultant in Manchester

At Jacobs, we're challenging today to reinvent tomorrow by solving the world's most critical problems for thriving cities, resilient environments, mission‑critical outcomes, operational advancement, scientific discovery and cutting‑edge manufacturing, turning abstract ideas into realities that transform the world for good.

Your impact: As a highly experienced Cyber professional, you’ll operate across the full lifecycle of IT security engineering — shaping strategy, defining solutions, and rolling up your sleeves to deliver them, being both hands‑on & a trusted advisor, blending theory, governance, threat hunting and practical delivery into one. To support our success and growth a number of new roles have been created throughout the UK. From early design through to live operations, you’ll lead and influence security decisions that matter, with a remit that will include:

• Design, integration, and security testing of cybersecurity solutions, response, recovery & vulnerability plans.
• Act as design authority for secure system lifecycles, access control, authentication, encryption, backup, disaster recovery, and incident response.
• Develop cybersecurity assessment methodologies, identifying security requirements for auditing, monitoring and compliance.
• Develop and implement robust security risk management processes in collaboration with clients and regulatory authorities.
• Conduct security reviews, threat & technical assessment, audits and gap analysis.
• Contribute subject matter expert input to business development activities, proposals etc.
• Maintain up‑to‑date knowledge of relevant IT security standards, regulations, and emerging threats.

Qualifications:

• Demonstrable experience in IT cybersecurity ideally within CNI or industrial/operational environments.
• Strong understanding of IT technologies used across CNI sectors (servers, container services, networking, cloud, hosting, storage and security appliances).
• Experience with security engineering technologies (endpoint protection, firewalls, IPS, API).
• Understanding of cybersecurity, I.T security services provided in enterprise & their inter‑relationships (security architecture, GRC, SOC, analyst & forensic services).
• Understanding of cloud edge connectivity and security, including security baseline considerations for hybrid & multi‑cloud environments.
• Familiar with implementing and working with standards and frameworks (IEC 62443, NIST CSF, ISO 27000 series, MITRE ATT&CK, GDPR, NCSC CAF and NIS/NIS2 regulations).
• Ability to explain threat‑based and risk‑informed security considerations in clear business terms.

As a disability‑confident employer, we will interview disabled candidates who best meet the criteria. We welcome applications from candidates who are seeking flexible working and from those who may not meet all the listed requirements for a role.