Principal Security Consultant - DSS

LRQA; Birmingham; On-site; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Flexible working arrangements

Competitive salary

Comprehensive benefits package

Job summary

LRQA in Birmingham is seeking a Principal Security Consultant to join our MSSP SOC, delivering professional services while strengthening client security across multiple environments.

You will balance hands-on delivery with architectural guidance, act as a trusted advisor, and contribute to the development of repeatable delivery patterns and new security capabilities within LRQA's managed services portfolio.

Qualifications

• Extensive MSSP/managed services security consultancy experience.
• Proven ability to design and implement enterprise security architectures.
• Hands-on with Microsoft security stack and cloud security tooling.
• Experience in delivering security programs aligned to NIST/ISO standards.

Responsibilities

• Lead the design and delivery of defensive security services across Microsoft or CrowdStrike ecosystems.
• Develop reference architectures, target operating models and design patterns.
• Design security controls for complex hybrid/multi-cloud environments.
• Oversight of multiple engagements ensuring Zero Trust and regulatory alignment.
• End-to-end delivery of SOC/SIEM/SOAR, XDR/EDR, identity and cloud security services.

Skills

MSSP experience

Microsoft security stack

Zero Trust architecture

Security governance

Stakeholder communication

Pre-sales collaboration

Threat and risk assessment

Tools

Microsoft Defender for Cloud

Microsoft Sentinel

CrowdStrike

SIEM/SOAR

Job description

Job ID:43261

Location: Birmingham : 1 Trinity Park : Bi

Position Category: Technical

Position Type: Employee Regular

Principal Security Consultant - DSS

This role sits within the consulting function of our MSSP SOC, delivering engaging professional services while also supporting and enhancing the security posture of existing managed service clients. It operates across multiple customer environments, balancing hands-on technical delivery with architectural guidance.

As a recognised authority within the security domain, the role provides clear, pragmatic advice to help customers design, implement and mature security capabilities aligned to modern threats and regulatory expectations. The focus is on improving security outcomes across concurrent engagements, from targeted solution delivery through to broader security transformation initiatives.

The role plays a key part in developing emerging security capabilities within the MSSP, helping to evaluate new technologies, shape repeatable delivery approaches and ensure customers benefit from cutting-edge security services in a sustainable way. Working closely with SOC, engineering and pre-sales teams, the role ensures solutions are technically robust, operationally effective and aligned to the long-term evolution of the MSSP platform.

Key Responsibilities

LRQA is an award-winning provider of Cyber Security, Assurance, Incident Response and Managed Security Services provider to organisations across the world. Due to continued evolution of our services we are seeking a Principal Security Consultant to support LRQA in continuing to be a renowned market leading provider of Managed Security and Support Services.

Key responsibilities for the role include:

• Lead the design and implementation of defensive security services, with particular focus on either the Microsoft or CrowdStrike ecosystem, across a wide range of exciting customer environments.
• Act as a trusted security consultant, developing reference architectures, target operating models and design patterns spanning Microsoft-native and non-Microsoft technologies.
• Design and integrate security controls within complex enterprise, hybrid and multi-cloud architectures, ensuring interoperability and operational sustainability.
• Provide oversight across multiple security engagements, ensuring solutions align with Zero Trust principles, regulatory requirements and recognised security frameworks.
• Lead the end-to-end delivery of complex consultancy engagements across SOC/SIEM/SOAR, XDR/EDR, identity, cloud security, vulnerability management and related services, ensuring delivery to agreed scope, quality and timelines.
• Serve as a senior technical authority and escalation point for high-impact engagements, including complex designs, critical incidents and security transformation programmes.
• Produce high-quality architectural artefacts, documentation and reusable assets, including design documents, templates, scripts and automation to enable scalable and repeatable service delivery.
• Collaborate closely with sales, pre-sales, PMO and wider delivery teams to scope and estimate new engagements, contribute to statements of work, and ensure effective transition from design into delivery.
• Maintain and continuously improve standard methodologies, deployment patterns and delivery processes, driving consistency, quality and maturity across consultancy and managed services engagements.
• Build and sustain strong client and stakeholder relationships, representing the security consultancy function in governance forums, service reviews and technical assurance discussions.

What You’ll Bring

• Significant experience delivering complex security consultancy engagements within an MSSP or managed services environment, covering SOC design and deployment, SIEM/SOAR, XDR/EDR, identity, cloud security and vulnerability management.
• Proven capability designing and implementing enterprise security architectures across Microsoft and mixed-vendor environments, including SaaS platforms and hybrid cloud estates.
• Deep hands-on expertise across the Microsoft security and compliance ecosystem, including Microsoft Sentinel, Defender XDR, Purview, Entra ID and Defender for Cloud, from solution design through to implementation and optimisation.
• Experience designing, onboarding and maturing SOC capabilities, including SIEM and XDR integrations, log ingestion strategies, detection engineering and security posture management.
• Strong working knowledge of Zero Trust architecture and the application of recognised security frameworks such as NIST CSF, ISO 27001, PCI DSS, DORA, MITRE ATT&CK and CSA guidance.
• Demonstrable experience operating within a Partner delivery model, including customer-facing consultancy, reference architectures, repeatable deployment patterns and alignment to security best practices.
• Ability to translate complex technical risk, architectural decisions and delivery outcomes into clear, pragmatic guidance for customer and senior technical stakeholders.
• Experience defining and improving delivery processes within an MSSP context, including service standardisation, documentation and continuous improvement.
• Holder of recognised industry certifications such as CISSP, CISM, CISA or CySA+, alongside relevant Microsoft security certifications including SC-100 (Microsoft Cybersecurity Architect), SC-200 (Security Operations Analyst), AZ-500 (Azure Security Engineer) or alternates aligned the CrowdStrike ecosystem, such as, CrowdStrike Certified Falcon Administrator (CCFA), CrowdStrike Certified SIEM Engineer (CCSE), CrowdStrike Certified Identity Specialist (CCIS), CrowdStrike Certified Cloud Specialist (CCCS).
• Strong commercial awareness relevant to consultancy and managed services delivery, including engagement scoping, effort estimation and delivery quality.

Key Working Relationships

The following groups represent the expected primary working relationships required for this job role:

• External Clients (New and Existing)
• Internal LRQA colleagues
• VP Advisory Services
• VP Detect & Respond
• Security Engineering Manager
• Security Engineering Team Lead
• SOC Monitor Team
• SOC Consultants
• Technical Pre-Sales & Sales Team
• Other Technical and Compliance Teams

Who are LRQA?

LRQA is a leading global assurance partner, combining deep industry expertise with innovative solutions to help organisations manage risk, improve performance, and drive sustainable growth.

Operating in over 50 countries with a team of 2,500+ professionals, we support more than 60,000 clients worldwide through assurance, certification, cybersecurity, inspection, and training services.

Our purpose is simple: to help businesses build a safer, more secure, and more sustainable future.

What We Offer

Join a global team where your expertise is valued and your development is supported. We offer a collaborative work environment, opportunities for professional growth, flexible working arrangements where applicable, a competitive salary aligned with the market, and a comprehensive benefits package.

Pre-Employment Checks

If you are successful in securing a role with us, we may carry out pre-employment checks, as permitted by local law, including verification of identity, right to work, employment history, education, and criminal records where applicable.

These checks are conducted by our trusted screening partner, Cfirst, in compliance with applicable data protection laws. Any personal data collected will be used solely for recruitment purposes, stored securely, and retained only as required.

For questions about the screening process, contact [e-mail]

For queries regarding your personal data, contact [e-mail]

Diversity and Inclusion at LRQA

We are on a mission to be the place where we all want to work and we are passionate about embracing different perspectives because we understand the value this brings to our business, our clients and each other. We are all about creating a safer and more sustainable future and our inclusive culture is right at the heart of our business.

Together our employees make our communities better and we want you to be part of our diverse team!

LRQA is a leading global assurance provider. The integrity and expertise we bring to our partnership with clients support their journey to a safer, more secure and more sustainable future. ( Group entities ).