Title: Principal Security Engineer
Location: London (Office based)
Contract Duration: 6 Months
IR35 Status: £Inside IR35
Role Purpos
eSenior hands-on Cyber Security Engineer and Security Architect responsible for ensuring secure-by-design delivery and operational security assurance across the programme lifecycle
Act as the primary authority for
- :Threat Modelling, Security Architecture, Control Validation, Security Testing, Security Assurance, Evidence Management
Responsible for validating all programme activities from
:Requirements → Architecture → Design → Build → Test → Deploy → Hyper-care → BAU Handover while ensuring compliance with CIS Controls v8.1 IG3 requirements
.
Essential Experien
- ce12+ years Cyber Security Engineering experien
- ce5+ years Security Architecture and Security Validation experien
- ceEnterprise-scale security design and implementati
- onStrong hands-on engineering capabili
- tyProven secure-by-design delivery experien
- ceExperience wit
- h:CIS Controls v8.1, NIST CSF, ISO 27001 / ISO 270
- 02Extensive Threat Modelling experience usin
- g:STRIDE, MITRE ATT&CK, OWASP methodologi
- esHands-o
- n:Penetration Testing, Security Testing, Control Validati
- onExperience working withi
- n:Agile, DevSecOps, Evidence-driven governance framewor
- ksExecutive stakeholder engagement experien
ce
Essential Technical Ski
llsSecurity Architect
- ureEnterprise Security Architecture, Threat Modelling, Control Framework Design, Secure-by-Design Princip
lesSecurity Operati
- onsSIEM, Endpoint Security, Vulnerability Management, Incident Respo
nseSecurity Test
- ingPenetration Testing, Security Validation, Control Assura
nceGovernance & R
- iskSecurity Assurance, Risk Reporting, KRI Management, External Audit Supp
ortDelivery Methodolog
- iesAgile, Scrum, Kan
- banDevSecOps, SAFe PI Plann
ing
Essential Tools & Methodolo
- giesJira, Azure DevOps, MS Pro
- jectmonday.com, PowerPoint, Powe
- r BIExcel, Python, Cop
ilot
Essential Certifica
tionsMandatory: CISSP AND One of: CISM/ CISA/ CCSP/ SABSA Practitioner/
CRISCAND One of: OSCP/ GIAC GPEN
/ CEH
Additional Expe
- rienceRetail sector expe
- rienceLarge distributed enterprise enviro
- nment
- sSABSAOWASP Threat Dragon auth
- orshipMicrosoft Threat Modeling Tool exp
- ertisePower BI dashboard devel
- opmentmonday.com implementation expe
