Security Consultant

Version 1; City Of London; Hybrid; GBP 85,000 - 125,000; Full time

Benefits offered by this job

Profit‑sharing plan

Career progression & mentoring

Flexible/remote working

Pension

Private healthcare

Life assurance

Employee discounts

Wellbeing programmes

Educational assistance (AWS, MS, AWS,)

Job summary

Version 1 is seeking a hands-on Security Consultant with a strong track record across cloud, application, and data security. You will assess current controls, design secure cloud landing zones, and partner with engineering and operations to embed security into delivery pipelines.

The role requires excellent consulting skills and the ability to communicate risk to diverse stakeholders. You will lead security architecture reviews, advise on risk reduction, and support threat detection, incident

Qualifications

• Hands-on experience in cloud security architecture, especially AWS, with focus on controls across cloud and data protection.
• Experience securing applications and APIs across the software lifecycle, including secure design and auth models.
• Hands-on SIEM experience: onboarding, rules, dashboards, triage and tuning.
• Understanding of policy, governance, risk, and third‑party risk with practical controls.
• Hands-on IAM: RBAC, least privilege, MFA, SSO, access governance; entitlement reviews.
• Experience implementing data classification, encryption, key management and data lifecycle protection.
• Experience securing OS, VMs, containers/Kubernetes, networks with secure configurations.
• Experience in threat detection engineering, incident response, and playbooks.
• Hands-on IaC with security checks embedded in CI/CD pipelines and guardrails.
• Strong consulting and stakeholder management to challenge assumptions and advise clients.

Responsibilities

• Assess current-state security maturity, identify gaps, and define remediation roadmaps aligned to business priorities.
• Lead security architecture reviews across cloud, apps, IAM, data protection, and detection domains.
• Provide expert consulting on security strategy, risk reduction, and operating model improvements.
• Challenge security assumptions with evidence-based recommendations to non-technical stakeholders.
• Design and review secure cloud landing zones, network segmentation, and guardrails.
• Collaborate with engineering, platform, DevOps to embed security into delivery pipelines and IaC.
• Support threat detection, incident response readiness, and post-incident improvement activities.
• Contribute to security standards, policies, patterns, and client deliverables including risk registers.
• Prepare executive summaries and client-facing deliverables with clear risk framing.

Skills

Cloud security

App/API security

SIEM

Policy & governance

IAM

Data protection

Infrastructure security

Threat detection

IaC security

Consulting skills

Job description

Company Description

Version 1 has celebrated 30 years in business and continues to be trusted by global brands to deliver technology and transformation solutions that drive customer success. Our deep expertise enables our customers to navigate the rapidly evolving technology landscape. We foster strong partnerships with global technology leaders including Microsoft, AWS, Oracle, Red Hat, OutSystems, Snowflake, ensuring that our customers are provided with the highest quality solutions and services.

• UK & Ireland's premier AWS, Microsoft & Oracle partner
• 3300+ strong, €350/£300m revenue business
• 10+ years as a Great Place to Work in Ireland & UK
• Best Workplace for Women in the UK & Ireland by GPTW
• Best Workplace for Wellbeing in the UK by GPTW

We're a core values driven company, we hire people who share our values, and we reward those who display and foster them, it's deeply embedded within our DNA. Invest in us and we'll invest in you!.

Job Description

We are seeking a hands‑on Security Consultant who can combine deep technical delivery capability with strong client‑facing consulting skills. The ideal candidate will be comfortable assessing, designing, improving and governing security controls across cloud environments, applications, APIs, infrastructure and enterprise security domains. This role requires someone who can challenge customer security assumptions, influence stakeholders, and lead difficult but constructive conversations to drive secure outcomes.

Qualifications

Key Responsibilities

• Assess current-state security maturity, identify control gaps, and define pragmatic remediation roadmaps aligned to business priorities.
• Lead and support security architecture reviews across cloud, applications, infrastructure, IAM, data protection and detection/response domains.
• Provide expert consulting to customers on security strategy, risk reduction, control design, and security operating model improvements.
• Challenge weak security assumptions with confidence, using evidence-based recommendations and clear communication with technical and non‑technical stakeholders.
• Design and review secure cloud landing zones, network segmentation, identity models, logging/monitoring patterns, and guardrails.
• Partner with engineering, platform, DevOps and operations teams to embed security into delivery pipelines and infrastructure as code practices.
• Support threat detection, incident response readiness, use‑case tuning, and post‑incident improvement activities.
• Contribute to security standards, policies, patterns, reusable accelerators, and client‑facing deliverables including assessments, risk registers and executive summaries.

Required Hands‑On Experience

1. Cloud Security (preferably AWS)

• Hands‑on experience securing cloud environments, preferably AWS, including core services, networking, identity, logging, encryption and security monitoring.
• Experience reviewing or implementing secure cloud architectures, landing zones, account/project structures, and preventative/detective controls.
• Knowledge of cloud‑native security services and best practices for workload, storage, network and platform protection.

2. Application / API Security

• Experience identifying and mitigating application and API security risks across the software delivery lifecycle.
• Understanding of secure design principles, common web/API vulnerabilities, authentication/authorization models, secrets management and secure SDLC practices.
• Ability to work with development teams to improve application security posture and shift security left.

3. SIEM Experience

• Hands‑on experience with SIEM platforms for log onboarding, correlation rule creation, alert triage, dashboarding and use‑case tuning.
• Ability to improve visibility, reduce noise, and align SIEM content to relevant threats and business risks.

4. Organisation / General Security

• Broad understanding of enterprise security domains including policy, governance, risk, compliance, awareness, third‑party risk and operational security.
• Experience translating business and regulatory requirements into practical security controls and improvement plans.

5. Identity & Access Management (IAM)

• Hands‑on experience with identity and access management principles including RBAC, least privilege, privileged access, federation/SSO, MFA and access governance.
• Experience reviewing entitlement models, service identities and access control weaknesses across enterprise and cloud platforms.

6. Data Protection

• Experience implementing or advising on data classification, encryption, key management, secrets handling, tokenisation/masking, backup security and data lifecycle protection.
• Understanding of how to secure sensitive data in transit, at rest and in use across modern platforms.

7. Infrastructure Security

• Experience securing operating systems, virtual machines, containers/Kubernetes, networks and platform services using hardening, segmentation, vulnerability management and secure configuration practices.
• Ability to assess infrastructure risks and recommend practical remediation approaches.

8. Threat Detection & Incident Response

• Experience in threat detection engineering, incident triage, investigation support, response coordination and lessons‑learned improvement activities.
• Ability to map telemetry and controls to attack paths, detection scenarios and response playbooks.

9. Infrastructure as Code (IaC)

• Hands‑on experience with infrastructure as code and automation, including reviewing templates/modules for security risks and embedding policy/compliance checks into delivery pipelines.
• Ability to apply security guardrails to repeatable platform provisioning and change delivery.

10. Strong Consulting Skills

• Strong consulting and stakeholder management skills, with the confidence to challenge customer assumptions and lead difficult security conversations when needed.
• Ability to balance risk, delivery timelines, business context and technical constraints to provide credible, pragmatic recommendations.
• Strong written and verbal communication skills, including workshops, assessments, reports and executive‑level briefings.

Core Skills & Competencies

• Cloud security architecture and control design
• Security assessments, gap analysis and remediation planning
• Stakeholder engagement and client advisory
• Security architecture documentation and reporting
• Risk-based decision making and prioritisation
• Cross‑functional collaboration with engineering, operations and leadership teams
• Strong analytical, investigative and problem‑solving capability

Preferred Qualifications

• Experience working in consulting, professional services, or customer‑facing transformation programmes.
• Relevant certifications in cloud, security, architecture or incident response are advantageous.
• Exposure to regulated environments and security frameworks is beneficial.
• Experience with DevSecOps, CI/CD security integration and security automation is desirable.

Additional Information

Why Version 1?

At Version 1, we believe in providing our employees with a comprehensive benefits package that prioritises their wellbeing, professional growth, and financial stability.

• Share in our success with our Quarterly Performance‑Related Profit Share Scheme, where employees collectively benefit from a share of our company's profits
• Strong Career Progression & mentorship coaching through our Strength in Balance & Leadership schemes with a dedicated quarterly Pathways Career Development programme
• Flexible/remote working, Version 1 is tremendously understanding of life events and people's individual circumstances and offer flexibility to help achieve a healthy work life balance
• Financial Wellbeing initiatives including; Pension, Private Healthcare Cover, Life Assurance, Financial advice and an Employee Discount scheme
• Employee Wellbeing schemes including Gym Discounts, Bike to Work, Fitness classes, Mindfulness Workshops, Employee Assistance Programme and much more. Generous holiday allowance, enhanced maternity/paternity leave, marriage/civil partnership leave and special leave policies
• Educational assistance, incentivised certifications, and accreditations, including AWS, Microsoft, Oracle, and Red Hat
• Reward schemes including Version 1's Annual Excellence Awards & 'Call‑Out' platform.
• Environment, Social and Community First initiatives allow you to get involved in local fundraising and development opportunities as part of fostering our diversity, inclusion and belonging schemes.

Version 1 is an equal opportunities employer.

We are committed to building a diverse, inclusive and respectful workplace where everyone feels valued and able to thrive. We welcome applications from people of all backgrounds, identities and lived experiences, and we value the different perspectives people bring including those shaped by disability and neurodiversity.

We want every candidate to have a positive and accessible recruitment experience. If you need reasonable adjustments at any stage of the process, please contact your recruiter at Version 1. We will consider all requests carefully, respectfully and confidentially.

Video links: https://www.youtube.com/watch?v=F_d3ELTH5zo