Cyber Security Consultant: Threat Modeling & Secure Cloud

Ampstek; Leeds; On-site; GBP 70,000 - 110,000; Full time

Job summary

Lloyds Banking Group is seeking Cyber Security Consultants to join our Security Consultancy and Design team in the heart of our cyber security efforts. You will contribute to secure by design across our change portfolio, applying agile methods and delivering security-focused guidance to engineers and stakeholders.

The role requires broad knowledge of cyber security domains and modern enterprise technologies, including cloud, AI, APIs, and microservices, with a focus on risk assessment, secure

Qualifications

• Dynamic, solution-oriented professional with the ability to work under pressure.
• Broad knowledge of modern Enterprise technologies including Cloud and AI.
• Experience with RESTful APIs and containerised microservices.
• Familiar with threat modelling frameworks STRIDE and MITRE ATT&CK.
• Extensive knowledge of cyber security domains in enterprise environments (endpoint, network, cryptography, IAM).

Responsibilities

• Apply Agile methodologies to support engineers across multiple product initiatives.
• Threat model by deconstructing technical solutions and assessing risks.
• Analyse design options to support secure architectural decisions.
• Design secure solutions with key security controls and standards.
• Define security testing requirements and assess findings.
• Communicate security direction and governance to technical and non-technical audiences.

Skills

Threat modelling

Cloud & AI knowledge

RESTful APIs

Containerised microservices

Cyber security domains

Tools

STRIDE

MITRE ATT&CK

Job description

Lloyds Banking Group is seeking Cyber Security Consultants to join our Security Consultancy and Design team in the heart of our cyber security efforts. You will contribute to secure by design across our change portfolio, applying agile methods and delivering security-focused guidance to engineers and stakeholders.

The role requires broad knowledge of cyber security domains and modern enterprise technologies, including cloud, AI, APIs, and microservices, with a focus on risk assessment, secure