Remote Security Consultant: SDLC & NIST CSF Lead

Fruition Group; Remote; GBP 80,000 - 100,000; Part time

Job summary

An established consultancy is seeking a Security Consultant to enhance the Secure Software Development Lifecycle within a complex environment. This role involves leading security improvements, embedding security controls across delivery lifecycles, and working on vulnerability management. The ideal candidate will have a strong knowledge of NIST CSF and hands-on experience in cloud and application security. This is a remote position offering a contract for 9 months, outside IR35.

Qualifications

• Proven experience improving Secure SDLC maturity within complex environments.
• Strong knowledge of NIST CSF, application security, and secure-by-design principles.
• Hands-on capability across vulnerability management and control validation.
• Strong understanding of cloud and platform security (AWS, Kubernetes, APIs, IAM).

Responsibilities

• Lead improvements to the Secure Software Development Lifecycle, aligned to NIST CSF 2.0.
• Act as an Application Security / Project Guardian, embedding security across delivery lifecycles.
• Review and tighten existing vulnerability management practices.
• Define and document end-to-end security requirements for delivery teams.
• Ensure security controls are applied at the right stage of projects.
• Bring together application, cloud, and infrastructure security for SDLC controls.
• Validate that security controls are effectively implemented.

Skills

Improving Secure SDLC maturity

Knowledge of NIST CSF

Application security

Vulnerability management

Cloud security (AWS, Kubernetes)

Risk management

Job description

An established consultancy is seeking a Security Consultant to enhance the Secure Software Development Lifecycle within a complex environment. This role involves leading security improvements, embedding security controls across delivery lifecycles, and working on vulnerability management. The ideal candidate will have a strong knowledge of NIST CSF and hands-on experience in cloud and application security. This is a remote position offering a contract for 9 months, outside IR35.