At a Glance
- Tasks: Provide hands-on security expertise in cloud and digital services, enhancing DevSecOps practices.
- Company: Join a dynamic consultancy focused on public sector projects.
- Benefits: Competitive rate, flexible work arrangements, and opportunities for professional growth.
- Why this job: Make a real impact by embedding security in innovative tech solutions.
- Qualifications: Experience in DevSecOps, AWS/Azure, and stakeholder consulting required.
- Other info: Inclusive workplace valuing diversity and offering support throughout the recruitment process.
Location: London
Type: 1 day a week on-site
Clearance: Active SC Clearance
IR35: Outside
Rate: £400 - £500
Contingency: Must be able to start within 1-2 weeks
Sanderson G&D are seeking a Security Consultant with a broad technical skillset to operate with a technical consultancy supplying into the Public Sector. This is a great chance to join an exciting team and project area.
Responsibilities
- Deliver hands‑on technical security expertise across cloud and digital services, actively contributing to solution implementation rather than operating in an assurance or purely architectural capacity.
- Embed security within DevSecOps practices, advising on secure engineering approaches, tooling, automation, CI/CD pipelines, and helping teams "shift security left" while contributing directly to technical tasks as needed.
- Engage proactively with stakeholders across technical, delivery, and senior leadership communities - translating complex security issues into clear, actionable insights and influencing decision‑making.
- Work directly in AWS and/or Azure environments, supporting secure configuration, cloud-native security patterns, and hands‑on troubleshooting in live or developing services.
- Support continuous improvement by identifying opportunities to enhance security processes, automation, tooling, and team capability.
Essential Skills
- Demonstrable technical experience across DevSecOps tech stacks
- Demonstrable experience of operating in AWS/Azure Cloud Environments
- Zero Trust principles and practical implementation
- Secure by Design
- Logging, monitoring & detection: CloudWatch, Azure Monitor, Security Center/Defender, SIEM concepts
- Demonstrable experience of consulting stakeholders and customers.
- Experience of working with a consultancy
If you need any help or adjustments during the recruitment process for any reason, please let us know when you apply or talk to the recruiters directly so we can support you.
Security Consultant (DevSecOps) - SC Cleared - Outside IR35 employer: Sanderson Government & Defence
Contact Detail:
Sanderson Government & Defence Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Security Consultant (DevSecOps) - SC Cleared - Outside IR35
✨Tip Number 1
Network like a pro! Reach out to your connections in the industry, especially those who work in security or consultancy. A friendly chat can lead to insider info about job openings that aren't even advertised yet.
✨Tip Number 2
Show off your skills! Create a portfolio or a GitHub repository showcasing your DevSecOps projects. This gives potential employers a tangible look at what you can do and sets you apart from the crowd.
✨Tip Number 3
Prepare for interviews by practising common questions related to security consulting and DevSecOps. We recommend doing mock interviews with friends or using online platforms to get comfortable with your responses.
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure your application gets seen by the right people. Plus, we love seeing candidates who take the initiative to connect directly with us.
We think you need these skills to ace Security Consultant (DevSecOps) - SC Cleared - Outside IR35
Some tips for your application 🫡
Tailor Your CV: Make sure your CV is tailored to the Security Consultant role. Highlight your experience with DevSecOps, AWS/Azure, and any relevant security practices. We want to see how your skills match what we're looking for!
Craft a Compelling Cover Letter: Your cover letter is your chance to shine! Use it to explain why you're passionate about security and how you can contribute to our team. Keep it concise but impactful – we love a good story!
Showcase Your Technical Skills: In your application, don't forget to showcase your technical expertise. Mention specific tools and practices you've used in DevSecOps, and how you've implemented security measures in cloud environments. We’re keen to see your hands-on experience!
Apply Through Our Website: We encourage you to apply through our website for a smoother process. It helps us keep track of applications and ensures you don’t miss out on any important updates. Plus, it’s super easy!
How to prepare for a job interview at Sanderson Government & Defence
✨Know Your Tech Stack
Make sure you’re well-versed in the specific DevSecOps tech stacks mentioned in the job description. Brush up on your AWS and Azure skills, and be ready to discuss how you've implemented security practices in these environments.
✨Showcase Your Hands-On Experience
This role requires a hands-on approach, so be prepared to share examples of your direct involvement in security implementations. Talk about specific projects where you contributed to CI/CD pipelines or automated security processes.
✨Engage with Stakeholders
Demonstrate your ability to communicate complex security issues clearly. Prepare examples of how you've successfully engaged with technical teams and senior leadership to influence decision-making and drive security initiatives.
✨Emphasise Continuous Improvement
Highlight your proactive mindset by discussing how you've identified opportunities for enhancing security processes in previous roles. Be ready to suggest ideas on how you could contribute to continuous improvement in this new position.