Cyber Event and Threat Senior Consultant

Consult; Reading; Hybrid; GBP 111,000 - 166,000; Full time

Job summary

Consult is seeking a Cyber Threat Management Consultant to support a major international defence programme through a specialist cyber security consultancy.

This role focuses on developing cyber threat management processes and improving operational security capabilities within a high-profile defence environment, with on-site Reading involvement twice weekly and an Outside IR35 contract. You will engage senior defence stakeholders and contribute to governance and incident response improvements.

Qualifications

• Proven experience in cyber threat management or incident management.
• Background in UK defence or critical national infrastructure.
• Hands-on experience with threat modelling methodologies (MITRE ATT&CK, STRIDE, or attack trees).
• Experience developing operating procedures and governance frameworks.
• Exposure to threat intelligence platforms or related tooling.
• Strong stakeholder management and communication skills; able to engage senior audiences.
• Active security clearance; able to work on-site in Reading twice a week.

Responsibilities

• Establish and operationalise processes for cyber events, incidents and threats.
• Develop procedures for detection, triage, escalation and response.
• Conduct threat modelling, scenario analysis and vulnerability assessments.
• Produce actionable threat assessments and prioritised mitigation recommendations.
• Support the development of a cyber threat platform, including requirements and use cases.
• Establish governance arrangements, reporting mechanisms and escalation procedures.
• Engage with senior defence and government stakeholders, communicating complex technical risks clearly.

Skills

Cyber threat management

Incident management

Threat modelling

Stakeholder communication

Tools

MITRE ATT&CK

STRIDE

Threat intelligence platforms

Job description

CYBER THREAT MANAGEMENT CONSULTANT | OUTSIDE IR35

I’m currently recruiting for a Cyber Threat Management Consultant to support a major international defence programme through a specialist cyber security consultancy.

This is an excellent opportunity for an experienced cyber security professional to contribute to the development of cyber threat management processes and operational security capabilities within a high-profile defence environment.

The Opportunity

• Contract: Outside IR35
• Location: Reading - 2 days per week on-site
• Clearance: Active SC clearance or higher required
• Nationality: Due to the nature of this role, we can only consider sole UK, Italian or Japanese nationals

Key Responsibilities

• Establish and operationalise processes for managing cyber events, incidents and threats.
• Develop operating procedures for threat detection, triage, escalation and response.
• Conduct cyber threat modelling, scenario analysis and vulnerability assessments.
• Produce actionable threat assessments and prioritised mitigation recommendations.
• Support the development of a cyber threat platform, including requirements and use cases.
• Establish governance arrangements, reporting mechanisms and escalation procedures.
• Engage with senior defence and government stakeholders, communicating complex technical risks clearly.

What We’re Looking For

• Proven experience in cyber threat management, incident management or operational cyber security.
• Background working within UK defence or critical national infrastructure.
• Hands-on experience with cyber threat modelling methodologies, such as MITRE ATT&CK, STRIDE or attack trees.
• Experience developing operating procedures and governance frameworks.
• Exposure to threat intelligence platforms or related security tooling.
• Strong stakeholder management and communication skills, with the confidence to engage senior audiences.
• Active security clearance and the ability to work on-site in Reading twice a week.

This is an opportunity to take ownership of meaningful cyber security deliverables within a major international defence programme, working at the intersection of operational security, threat management and senior stakeholder engagement.

#CyberSecurity #CyberThreatManagement #Defence #SCIClearance #ContractJobs #OutsideIR35