Security Analyst

As strategies, technologies, and innovation collide, we create opportunity from complexity. Our teams of interdisciplinary experts combine innovative thinking and breakthrough technologies to progress further, faster. We are over 4,000 strategists, innovators, designers, consultants, digital experts, scientists, engineers, and technologists with deep expertise in various sectors.

Why consider joining our Digital & Data community? Join our Digital & Data team working alongside product, design and a wide range of other experts and cross-disciplinary teams to bring ideas to life through innovative software solutions. Grow a flexible and unique career within a trust-based, inclusive environment that values excellence, innovation, and curiosity.

Hybrid working - our approach is to be in the office or on client site a minimum of 2 days per week. Work on a broad variety of projects and tech stacks for clients across seven sectors - no project is ever the same. Join other experts within our supportive and collaborative tech community through knowledge-sharing and peer-level support, coaching and mentoring. Deepen your expertise through our culture of learning and growth – you'll have budget to take courses (technical and non-technical training), plus gain certifications.

Role Overview: We are looking for an AI Security Consultant to help organisations secure the next generation of technology environments, including AI-enabled applications, LLM integrations and agentic systems. This is a cyber security consulting role with an AI focus. You will advise clients on core cyber security risks across cloud, identity, applications, data, operations and governance, while also helping them understand and manage the new risks introduced by AI systems.

Key Responsibilities

• Cyber Security Consulting: Conduct cyber security assessments across technology estates, cloud environments, applications, networks, identity platforms and operational processes. Review security architectures and provide pragmatic recommendations aligned to business risk. Support the design and implementation of security controls across areas such as access management, data protection, logging and monitoring, vulnerability management, incident response and third-party risk. Help clients interpret security requirements, assess control maturity and develop actionable improvement roadmaps.
• AI and Agentic System Security: Assess the security risks associated with AI-enabled applications, LLM integrations, AI agents, autonomous workflows and model-connected business processes. Review AI system designs for risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure and weak human oversight. Support threat modelling for agentic systems. Advise on secure patterns for AI application development.
• AI-Enabled Security Operations: Identify opportunities to use AI safely to improve cyber security operations. Support the evaluation and adoption of AI-enabled security tools. Help security teams design workflows where AI augments analysts without introducing unacceptable risk. Develop practical playbooks, guardrails and operating models for the responsible use of AI.

The right candidate will combine strong cyber security fundamentals with curiosity and practical knowledge of AI security. You should be able to explain complex risks clearly, work with both technical and senior stakeholders, and provide advice that is proportionate, actionable and aligned to business outcomes.

Skills

• Experience with AI governance, responsible AI, model risk management or AI assurance.
• Familiarity with frameworks and guidance such as NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks.
• Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence or incident response.
• Knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases or automation/orchestration tools.
• Relevant certifications such as CISSP, CISM, CCSP, GIAC, ISO 27001 Lead Implementer/Auditor, cloud security certifications or AI/security-focused training.

Please be aware that some of our UK roles at PA Consulting require a UK security clearance. All PA people are required to undergo background checks and to achieve the Baseline Personnel Security Standard.

It's about how we enrich peoples' working lives by giving them access to unique people and growth opportunities and purpose led meaningful work. Our purpose guides how we work with our clients and our teams, and support our communities, to deliver insight and impact, solving the world's most complex challenges.

We're focused on building a workplace that values human difference and diverse mindsets, and a culture of inclusion and equality that unlocks the potential in our people so everyone can be their best self. We are dedicated to supporting the physical, emotional, social and financial well-being of our people.

Health and lifestyle perks accompanying private healthcare for you and your family, 25 days annual leave (plus a bonus half day on Christmas Eve) with the opportunity to buy 5 additional days, generous company pension scheme, opportunity to get involved with community and charity-based initiatives, annual performance-based bonus, PA share ownership, tax efficient benefits.

We're committed to advancing equality. We recruit, retain, reward and develop our people based solely on their abilities and contributions.