At a Glance
- Tasks: Deliver security assessments and implement controls across cloud environments.
- Company: Join RiverSafe, a growing security practice with a hands-on approach.
- Benefits: Competitive salary, hybrid work model, and opportunities for professional growth.
- Other info: Dynamic role with excellent career advancement opportunities.
- Why this job: Make a real impact in security consulting while working with cutting-edge technologies.
- Qualifications: Strong cloud security experience and client-facing skills required.
The predicted salary is between 70000 - 90000 £ per year.
Are you a security engineer who loves working with clients as much as you love the technical craft? We're growing our security practice at RiverSafe and looking for a Senior Security Consultant to join us in a hands-on, client-facing role.
The Role: This isn't a back-office position. You'll sit at the intersection of security consulting, cloud engineering, and DevSecOps - delivering real technical outcomes for clients while also shaping proposals, driving presales, and growing accounts.
What you'll be doing:
- Delivering security assessments, gap analyses, and maturity reviews across cloud and platform environments
- Designing and implementing security controls across AWS, Azure, and GCP
- Embedding security into CI/CD pipelines and championing DevSecOps practices
- Leading client workshops and presenting findings to technical and executive audiences
- Supporting the full presales cycle - from qualification through to proposal and award
- Contributing to detection engineering, SIEM strategy, and SOC governance
What you'll bring:
- Strong cloud security experience across AWS, Azure, and/or GCP
- Hands-on with Terraform, Kubernetes, and IaC security
- DevSecOps mindset - CI/CD, SAST/DAST, shift-left security
- Identity & access security - Zero Trust, RBAC, MFA, SSO
- Client-facing confidence - you can present to a CISO as comfortably as a developer
- Familiarity with NIST CSF, CIS Controls, or ISO 27001
- Relevant certifications (CISSP, CISM, AWS/Azure security, CKS) are a bonus, but breadth across domains matters more than any single credential.
London / Hybrid: 2-3 days per week in the office is required.
Senior Security Consultant (Platform Security Engineer) - Permanent in London employer: RiverSafe
RiverSafe is an exceptional employer located in the vibrant Greater London area, offering a dynamic work environment where collaboration and innovation thrive. As a Senior Security Consultant, you will benefit from extensive professional growth opportunities while working alongside a dedicated team committed to impactful cyber defense. Our strong team culture fosters creativity and support, making RiverSafe a rewarding place to advance your career in cybersecurity.
StudySmarter Expert Advice🤫
We think this is how you could land Senior Security Consultant (Platform Security Engineer) - Permanent in London
✨Tip Number 1
Network like a pro! Get out there and connect with folks in the industry. Attend meetups, webinars, or even just grab a coffee with someone who’s already in the role you want. It’s all about making those connections that could lead to your next opportunity.
✨Tip Number 2
Show off your skills! Create a portfolio or GitHub repository showcasing your projects, especially those related to cloud security and DevSecOps. This gives potential employers a tangible look at what you can do, and it sets you apart from the crowd.
✨Tip Number 3
Prepare for interviews by practising common questions and scenarios specific to security consulting. Think about how you’d handle client workshops or present findings to different audiences. The more prepared you are, the more confident you’ll feel!
✨Tip Number 4
Don’t forget to apply through our website! We’re always on the lookout for passionate individuals who fit the bill. Plus, applying directly shows your enthusiasm and commitment to joining our team at RiverSafe.
We think you need these skills to ace Senior Security Consultant (Platform Security Engineer) - Permanent in London
Some tips for your application 🫡
Show Your Passion for Security:Let us see your enthusiasm for security engineering! Share specific examples of your experience with cloud security and how you've tackled challenges in the past. We want to know what drives you in this field.
Tailor Your Application:Make sure to customise your CV and cover letter for the role. Highlight your hands-on experience with AWS, Azure, and GCP, and don’t forget to mention your DevSecOps mindset. We love seeing how your skills align with what we do!
Be Client-Focused:Since this is a client-facing role, showcase your ability to communicate effectively with both technical and non-technical audiences. Share instances where you've led workshops or presented findings, as this will resonate with us.
Apply Through Our Website:We encourage you to apply directly through our website. It’s the best way for us to receive your application and ensures you’re considered for the role. Plus, it shows you’re keen on joining our team!
How to prepare for a job interview at RiverSafe
✨Know Your Stuff
Make sure you brush up on your cloud security knowledge, especially around AWS, Azure, and GCP. Be ready to discuss specific projects where you've implemented security controls or worked with Terraform and Kubernetes. This will show that you’re not just familiar with the tools but have real hands-on experience.
✨Client-Facing Confidence
Since this role is client-facing, practice how you present technical information to different audiences. Prepare to explain complex concepts in simple terms, as you might need to present findings to both technical teams and executives. Role-playing with a friend can help you get comfortable.
✨Show Your DevSecOps Mindset
Be prepared to discuss how you've embedded security into CI/CD pipelines in past roles. Share examples of how you’ve championed DevSecOps practices and any challenges you faced. This will demonstrate your proactive approach to security and your ability to integrate it into development processes.
✨Understand the Bigger Picture
Familiarise yourself with frameworks like NIST CSF, CIS Controls, or ISO 27001. During the interview, relate your experiences back to these standards to show that you understand the broader context of security. This will highlight your strategic thinking and ability to align security practices with business goals.
