Cyber Security Consultant

Consult; Leeds; Hybrid; GBP 111,000 - 166,000; Part time

Job summary

Consult is seeking a Security Consultant to join our hybrid team across Manchester, Leeds, Bristol, Halifax, and Edinburgh. This contract role focuses on delivering secure engineering solutions, applying Agile methods and threat modelling to drive architecture decisions.

You will communicate security directions to both technical and non-technical audiences, assess testing requirements and ensure adherence to industry security standards. Experience with cloud and AI technologies is preferred.

Qualifications

• Experience with threat modelling frameworks (STRIDE / MITRE ATT&CK)
• Broad knowledge of modern Enterprise technologies including Cloud and AI
• Exposure to RESTful APIs and containerised microservices

Responsibilities

• Apply Agile methodologies to support engineers and deliver on multiple product initiatives.
• Threat model technical solutions by identifying threats, vulnerabilities and risks.
• Analyse risks and benefits of design options to support secure architectural decisions.
• Design secure solutions and document key security controls and standards compliance.
• Define security testing requirements and assess findings.
• Communicate complex security concepts clearly to technical and non-technical audiences and provide governance and guidance.

Skills

Dynamic problem solver

Under pressure

Cloud & AI familiarity

Threat modelling awareness

Job description

Job Title- Security Consultant

Location

Manchester, Leeds, Bristol, Halifax, Edinburgh, UK (Hybrid- 2 days' work from office)

Employment Type

Contract Inside IR35

Job Description-

What you'll do:

• Applying Agile methodologies to support engineers and deliver on multiple challenging product initiatives simultaneously, driving engineering excellence.
• Threat model by deconstructing technical solutions, identifying threats and vulnerabilities and assessing risks.
• Use experience to analyse the risks and benefits of design options to support making safe architectural decisions.
• Design secure solutions documenting the key security controls and adhering to security standards.
• Define security testing requirements and assess findings.
• Effectively communicate technical concepts to both technical and nontechnical audiences, providing security direction, governance, assurance and guidance.

What we're looking for:

• Dynamic solution-oriented individual bringing energy to a rapidly evolving environment with an ability to work well under pressure.
• Broad knowledge of modern Enterprise technologies including Cloud and AI
• Exposure to contemporary architectures eg. RESTful APIs and containerised microservices.
• Up-to date on emerging threats and experienced with threat modelling frameworks eg. STRIDE / MITRE ATT&CK.
• Significant knowledge of cyber security domains and how they apply to Enterprise business environments eg. endpoint, network, cryptography and IAM.

The nice to haves:

• Awareness of industry related security standards such as ISO 27000 series, PCI DSS, COBIT, NIST, OWASP.
• Certifications in security management eg. CISSP / CISM / CCSP or equivalent.
• Certifications in technical security domains eg. CEH / OSCP or equivalent.
• Experience of Public and or Private cloud environments.