Cyber Security Consultant - Threat Modeling & Secure Design

HCL Technologies Limited; Leeds; On-site; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Vacation entitlement

Term life insurance

Business Travel insurance

Diversity Council involvement

Job summary

HCL Technologies Limited in the United Kingdom is seeking a Security Consultant to join our Security Consultancy and Design team across multiple locations (Manchester, Leeds, Bristol, Halifax, Edinburgh).

You’ll apply Agile methods, perform threat modelling, design secure solutions, document key security controls, and communicate complex concepts to diverse audiences. A strong background in cyber security domains and modern enterprise tech is essential.

Qualifications

• Broad knowledge of modern Enterprise technologies including Cloud and AI.
• Experience with threat modelling using STRIDE and MITRE ATT&CK.
• Knowledge of cyber security domains such as endpoint, network, cryptography and IAM.
• Awareness of industry security standards like ISO 27000, PCI DSS, COBIT, NIST, OWASP.

Responsibilities

• Apply Agile methodologies to support engineers and deliver on multiple product initiatives.
• Threat model by deconstructing technical solutions, identifying threats and assessing risks.
• Analyse risks and benefits of design options to support secure architectural decisions.
• Design secure solutions and document key security controls and adherence to standards.
• Define security testing requirements and assess findings.
• Communicate security direction, governance, assurance and guidance to technical and non-technical audiences.

Skills

Threat modelling

Cloud & AI familiarity

RESTful APIs

Containerised microservices

Security governance

Tools

STRIDE

MITRE ATT&CK

Job description

HCL Technologies Limited in the United Kingdom is seeking a Security Consultant to join our Security Consultancy and Design team across multiple locations (Manchester, Leeds, Bristol, Halifax, Edinburgh).

You’ll apply Agile methods, perform threat modelling, design secure solutions, document key security controls, and communicate complex concepts to diverse audiences. A strong background in cyber security domains and modern enterprise tech is essential.