Cybersecurity Engineer

AMS CWS; Greater London; On-site; GBP 50,000 - 70,000; Full time

Job summary

AMS CWS is seeking a Cybersecurity Engineer to lead threat modelling and security assessments for a six-month London contract. You will develop Python-based security tools and drive secure design decisions across cloud and DevOps environments.

The role requires experience with AWS/Azure, Kubernetes, CI/CD, and IaC, delivering work in a regulated setting with minimal supervision. Three days per week in the office, umbrella or PAYE engagement models supported.

Qualifications

• Experience in cyber security or information security in an enterprise context.
• Ability to perform threat modelling using established methodologies.
• Strong security controls across authentication, logging, encryption and network segmentation.
• Development and DevOps knowledge including IaC and container technologies.
• Proficient Python programming with asynchronous patterns and testing.

Responsibilities

• Lead threat-modelling activities to identify and mitigate risks.
• Develop Python-based tools to improve security processes and delivery.
• Manage threat lifecycles with remediation tracking and validation.
• Deliver security assessments within agreed timelines and accuracy.
• Improve threat-modelling frameworks, tooling and best practices.
• Present findings to technical and cross-functional audiences.
• Mentor junior team members and support day-to-day operations.

Skills

Threat modelling

Security assessment

Python programming

DevOps practices

CI/CD pipelines

MITRE ATT&CK

Documentation

Stakeholder communication

Tools

AWS

Azure

Databricks

Docker

Kubernetes

GitHub

JIRA

Helm

Terraform

Pytest

Snowflake

MongoDB

Terraform Cloud

GitOps

Job description

Salary: £50,000 - 70,000 per year

Requirements:

• Experienced IT professional with cyber security or information security experience
• Technical expertise in threat modelling using STRIDE, PASTA, attack trees, threat-modelling tools and MITRE ATT&CK
• Cyber security experience covering authentication, authorisation, logging and monitoring, encryption, infrastructure security and network segmentation
• Development and DevOps knowledge, including CI/CD, pipelines, SDLC, scripting, Infrastructure as Code (Terraform or CloudFormation), Docker, Kubernetes, serverless and Helm
• Strong programming capability, preferably in Python, including asynchronous programming and FastAPI, plus unit testing with Pytest
• Experience applying security standards and SDLC controls to software platforms
• Experience identifying vulnerabilities using CWE or OWASP, hardening operating systems, and designing or reviewing technical architectures
• Working knowledge of agile/DevOps delivery, Jira, CDK/GitOps, penetration testing, and technologies such as Snowflake, MongoDB, Terraform Cloud, GitHub or Databricks
• Analytical and adversarial mindset, attention to detail, problem-solving ability and commitment to continuous learning
• Strong documentation, research, communication and collaboration skills, including experience building relationships across diverse teams in a regulated environment
• Desirable: professional-level cloud certification, vendor cloud certification, and professional cyber security certification from AWS, CGP or Azure
• Must operate via an Umbrella or PAYE engagement model

Responsibilities:

• Lead and deliver threat-modelling activities using established methodologies to identify, assess and mitigate security risks across applications and platforms
• Develop and maintain automation tools and Python-based solutions to enhance security processes, operational efficiency and service delivery
• Manage the lifecycle of identified threats and controls, ensuring timely remediation, tracking and validation of security measures
• Deliver high-quality threat models and security assessments within agreed timelines, maintaining accuracy and attention to detail
• Contribute to improving threat-modelling processes, frameworks, tooling and best practices across the organisation
• Present security findings and recommendations to technical teams, senior stakeholders and cross-functional audiences, influencing secure design decisions
• Mentor, train and guide junior team members while supporting the day‑to‑day operation and evolution of the threat-modelling service

Technologies:

• AWS
• Azure
• CI/CD
• Cloud
• Databricks
• DevOps
• Docker
• FastAPI
• GitHub
• GitOps
• Helm
• JIRA
• Kubernetes
• MongoDB
• Network
• OWASP
• Python
• Security
• Serverless
• Snowflake
• Terraform
• pytest

More:

We are AMS, a global workforce solutions partner committed to creating inclusive, dynamic and future-ready workplaces. We help organisations adapt, grow and thrive by building, shaping and optimising diverse talent strategies. Our Contingent Workforce Solutions service connects clients with skilled interim and temporary professionals and acts as an extension of their recruitment teams. For this role, we are supporting a global Big Four consultancy operating in more than 150 countries and serving public- and private-sector organisations across industries, with advisory work spanning audit, accountancy, tax, corporate finance and consulting. We are recruiting a Cybersecurity Engineer for a six-month contract based in London, with three days per week in the office. The role involves working across cloud, DevOps and regulated security environments with minimal supervision, and presenting technical work to senior and cross-functional stakeholders. We require workers to engage via an Umbrella or PAYE model.

last updated 40 week of 2026