Security Consultant

Fruition Group; England; On-site; GBP 55,000 - 75,000; Full time

Job summary

A leading technology firm in the United Kingdom is looking for a Mid-Senior level security expert to strengthen their Secure Software Development Lifecycle (SDLC) within a complex environment. The role involves leading improvements aligned to NIST CSF 2.0, ensuring security controls are applied throughout projects, and acting as a trusted security advisor. Ideal candidates will need experience in application security, vulnerability management, and understanding cloud security principles. This contract position is ideal for motivated professionals eager to embed security in project lifecycles.

Qualifications

• Proven experience improving Secure SDLC maturity within complex environments.
• Strong knowledge of NIST CSF and secure-by-design principles.
• Hands-on capability across vulnerability management and security assessments.

Responsibilities

• Lead improvements to the Secure Software Development Lifecycle aligned to NIST CSF 2.0.
• Act as an Application Security / Project Guardian embedding security across delivery lifecycles.
• Validate that back-end and platform security controls are correctly implemented.

Skills

Improving Secure SDLC maturity

NIST CSF

Application security

Vulnerability management

Security assessments

Cloud security

Risk management

Tools

AWS

Kubernetes

APIs

IAM

Job description

Direct message the job poster from Fruition Group

This contract role offers the opportunity to play a key part in strengthening an established Secure SDLC within a complex, large-scale environment. You'll work across application security and project delivery, influencing how security is embedded throughout the lifecycle and helping teams build solutions securely from the outset.

Responsibilities

• Lead improvements to the Secure Software Development Lifecycle, aligned to NIST CSF 2.0.
• Act as an Application Security / Project Guardian, embedding security across delivery lifecycles.
• Review and tighten existing vulnerability management practices.
• Define and document end-to-end security requirements in a clear, accessible format for delivery teams.
• Ensure security controls are applied at the right stage of projects, regardless of entry point.
• Bring together application, platform, cloud, and infrastructure security to ensure cohesive SDLC controls.
• Validate that back-end and platform security controls are correctly implemented and fit for purpose.
• Operate as a trusted internal security advisor, balancing risk, delivery timelines, and business objectives.

Requirements

• Proven experience improving Secure SDLC maturity within complex environments.
• Strong knowledge of NIST CSF, application security, and secure-by-design principles.
• Experience working with ISMS environments.
• Hands-on capability across vulnerability management, security assessments, and control validation.
• Ability to translate security requirements into practical, delivery-ready guidance.
• Experience working autonomously across multiple teams with competing priorities.
• Strong understanding of cloud and platform security (AWS, Kubernetes, APIs, IAM).
• Pragmatic approach to risk management in agile delivery environments.

We are an equal opportunities employer and welcome applications from all suitably qualified persons regardless of their race, sex, disability, religion/belief, sexual orientation or age.

Seniority level

Mid-Senior level

Employment type

Contract

Job function

Information Technology

Industries

Technology, Information and Internet