Principal Security Consultant - DSS

Nettitude Group; Birmingham; On-site; GBP 90,000 - 120,000; Full time

Job summary

LRQA seeks a Principal Security Consultant to lead complex security engagements across SOC, SIEM/SOAR, XDR/EDR, identity, and cloud security. You will design, implement and mature security architectures, working with SOC, engineering and pre-sales to deliver secure solutions aligned to regulatory expectations.

You will produce reusable architectural artefacts, engage with clients, and drive continuous improvement across consultancy and managed services delivery.

Qualifications

• Experience delivering complex security consultancy engagements in MSSP or managed services.
• Design and implement enterprise security architectures across Microsoft and mixed-vendor environments.
• Hands-on expertise in Microsoft security ecosystem and related compliance tools.
• Experience maturing SOC capabilities, including SIEM/XDR integrations and detection engineering.
• Strong knowledge of Zero Trust, NIST CSF, ISO 27001, PCI DSS, and CSA guidance.
• Experience in partner delivery models with customer-facing consultancy and reference architectures.
• Ability to translate technical risk and delivery outcomes into clear guidance for stakeholders.
• Experience improving MSSP delivery processes, documentation and standardisation.

Responsibilities

• Lead the design and implementation of defensive security services focusing on Microsoft or CrowdStrike ecosystems.
• Develop reference architectures, target operating models, and design patterns across MS-native and non-MS tech.
• Integrate security controls within complex hybrid and multi-cloud architectures.
• Provide oversight across multiple engagements ensuring alignment with Zero Trust and regulatory frameworks.
• Deliver end-to-end consultancy engagements across SOC/SIEM/SOAR, XDR/EDR, cloud security and vulnerability management.
• Act as senior technical authority for high-impact engagements and security transformation programmes.
• Produce architectural artefacts, templates, and automation to enable scalable delivery.
• Collaborate with sales, pre-sales, PMO and delivery teams to scope, estimate, and transition designs to delivery.
• Maintain and improve standard methodologies and delivery processes.

Skills

Security consulting

SOC design

SIEM/SOAR

XDR/EDR

Cloud security

Identity management

Zero Trust

Security frameworks

Microsoft Sentinel

Defender XDR

Purview

Entra ID

Defender for Cloud

CISSP

CISM

Tools

Microsoft Sentinel

Defender XDR

Purview

Entra ID

Defender for Cloud

Job description

Job ID:43261
Location:Birmingham : 1 Trinity Park : Bi
Position Category:Technical
Position Type:Employee Regular

Principal Security Consultant - DSS

Role Purpose:

This role sits within the consulting function of our MSSP SOC, delivering engaging professional services while also supporting and enhancing the security posture of existing managed service clients. It operates across multiple customer environments, balancing hands-on technical delivery with architectural guidance.

As a recognised authority within the security domain, the role provides clear, pragmatic advice to help customers design, implement and mature security capabilities aligned to modern threats and regulatory expectations. The focus is on improving security outcomes across concurrent engagements, from targeted solution delivery through to broader security transformation initiatives.

The role plays a key part in developing emerging security capabilities within the MSSP, helping to evaluate new technologies, shape repeatable delivery approaches and ensure customers benefit from cutting-edge security services in a sustainable way. Working closely with SOC, engineering and pre-sales teams, the role ensures solutions are technically robust, operationally effective and aligned to the long-term evolution of the MSSP platform.

Key Responsibilities:

LRQA is an award-winning provider of Cyber Security, Assurance, Incident Response and Managed Security Services provider to organisations across the world. Due to continued evolution of our services we are seeking a Principal Security Consultant to support LRQA in continuing to be a renowned market leading provider of Managed Security and Support Services.

Key responsibilities for the role include:

• Lead the design and implementation of defensive security services, with particular focus on either the Microsoft or CrowdStrike ecosystem, across a wide range of exciting customer environments.
• Act as a trusted security consultant, developing reference architectures, target operating models and design patterns spanning Microsoft-native and non-Microsoft technologies.
• Design and integrate security controls within complex enterprise, hybrid and multi-cloud architectures, ensuring interoperability and operational sustainability.
• Provide oversight across multiple security engagements, ensuring solutions align with Zero Trust principles, regulatory requirements and recognised security frameworks.
• Lead the end-to-end delivery of complex consultancy engagements across SOC/SIEM/SOAR, XDR/EDR, identity, cloud security, vulnerability management and related services, ensuring delivery to agreed scope, quality and timelines.
• Serve as a senior technical authority and escalation point for high-impact engagements, including complex designs, critical incidents and security transformation programmes.
• Produce high-quality architectural artefacts, documentation and reusable assets, including design documents, templates, scripts and automation to enable scalable and repeatable service delivery.
• Collaborate closely with sales, pre-sales, PMO and wider delivery teams to scope and estimate new engagements, contribute to statements of work, and ensure effective transition from design into delivery.
• Maintain and continuously improve standard methodologies, deployment patterns and delivery processes, driving consistency, quality and maturity across consultancy and managed services engagements.
• Build and sustain strong client and stakeholder relationships, representing the security consultancy function in governance forums, service reviews and technical assurance discussions.

What You'll Bring:

• Significant experience delivering complex security consultancy engagements within an MSSP or managed services environment, covering SOC design and deployment, SIEM/SOAR, XDR/EDR, identity, cloud security and vulnerability management.
• Proven capability designing and implementing enterprise security architectures across Microsoft and mixed-vendor environments, including SaaS platforms and hybrid cloud estates.
• Deep hands-on expertise across the Microsoft security and compliance ecosystem, including Microsoft Sentinel, Defender XDR, Purview, Entra ID and Defender for Cloud, from solution design through to implementation and optimisation.
• Experience designing, onboarding and maturing SOC capabilities, including SIEM and XDR integrations, log ingestion strategies, detection engineering and security posture management.
• Strong working knowledge of Zero Trust architecture and the application of recognised security frameworks such as NIST CSF, ISO 27001, PCI DSS, DORA, MITRE ATT&CK and CSA guidance.
• Demonstrable experience operating within a Partner delivery model, including customer-facing consultancy, reference architectures, repeatable deployment patterns and alignment to security best practices.
• Ability to translate complex technical risk, architectural decisions and delivery outcomes into clear, pragmatic guidance for customer and senior technical stakeholders.
• Experience defining and improving delivery processes within an MSSP context, including service standardisation, documentation and continuous improvement.
• Holder of recognised industry certifications such as CISSP, CISM, CISA or CySA+, alongside relevant Microsoft security certifications including SC-100 (Microsoft Cybersecurity Architect), SC-200 (Security Operations Analyst), AZ-500 (Azure Security Engineer) or alternates aligned the CrowdStrike ecosystem, such as, CrowdStrike Certified Falcon Administrator (CCFA), CrowdStrike Certified SIEM Engineer (CCSE), CrowdStrike Certified Identity Specialist (CCIS), CrowdStrike Certified Cloud Specialist (CCCS).
• Strong commercial awareness relevant to consultancy and managed services delivery, including engagement scoping, effort estimation and delivery quality.

Key Working Relationships:

The following groups represent the expected primary working relationships required for this job role:

• External Clients (New and Existing)
• Internal LRQA colleagues
• VP Advisory Services
• Security Engineering Manager
• Security Engineering Team Lead
• SOC Monitor Team
• SOC Consultants
• Other Technical and Compliance Teams

Who are LRQA?

LRQA is a leading global assurance partner, combining deep industry expertise with innovative solutions to help organizations manage risk, improve performance, and drive sustainable growth.

Operating in over 50 countries with a team of 2,500+ professionals, we support more than 60,000 clients worldwide through assurance, certification, cybersecurity, inspection, and training services.

Our purpose is simple: to help businesses build a safer, more secure, and more sustainable future.

What We Offer:

Join a global team where your expertise is valued and your development is supported. We offer a collaborative work environment, opportunities for professional growth, flexible working arrangements where applicable, a competitive salary aligned with the market, and a comprehensive benefits package.

Pre-Employment Checks:

If you are successful in securing a role with us, we may carry out pre-employment checks, as permitted by local law, including verification of identity, right to work, employment history, education, and criminal records where applicable.

These checks are conducted by our trusted screening partner, Cfirst, in compliance with applicable data protection laws. Any personal data collected will be used solely for recruitment purposes, stored securely, and retained only as required.

We are on a mission to be the place where we all want to work and we are passionate about embracing different perspectives because we understand the value this brings to our business, our clients and each other. We are all about creating a safer and more sustainable future and our inclusive culture is right at the heart of our business.

Together our employees make our communities better and we want you to be part of our diverse team!

LRQA is a leading global assurance provider. The integrity and expertise we bring to our partnership with clients support their journey to a safer, more secure and more sustainable future. ( Group entities ).