Security Consultant

Fruition Group; Remote; GBP 80,000 - 100,000; Part time

Job summary

An established consultancy is seeking a Security Consultant to enhance the Secure Software Development Lifecycle within a complex environment. This role involves leading security improvements, embedding security controls across delivery lifecycles, and working on vulnerability management. The ideal candidate will have a strong knowledge of NIST CSF and hands-on experience in cloud and application security. This is a remote position offering a contract for 9 months, outside IR35.

Qualifications

• Proven experience improving Secure SDLC maturity within complex environments.
• Strong knowledge of NIST CSF, application security, and secure-by-design principles.
• Hands-on capability across vulnerability management and control validation.
• Strong understanding of cloud and platform security (AWS, Kubernetes, APIs, IAM).

Responsibilities

• Lead improvements to the Secure Software Development Lifecycle, aligned to NIST CSF 2.0.
• Act as an Application Security / Project Guardian, embedding security across delivery lifecycles.
• Review and tighten existing vulnerability management practices.
• Define and document end-to-end security requirements for delivery teams.
• Ensure security controls are applied at the right stage of projects.
• Bring together application, cloud, and infrastructure security for SDLC controls.
• Validate that security controls are effectively implemented.

Skills

Improving Secure SDLC maturity

Knowledge of NIST CSF

Application security

Vulnerability management

Cloud security (AWS, Kubernetes)

Risk management

Job description

Job title: Security Consultant

Location: UK Remote

Contract: 9 months, Outside IR35

Why Apply?

This contract role offers the opportunity to play a key part in strengthening an established Secure SDLC within a complex, large-scale environment. You'll work across application security and project delivery, influencing how security is embedded throughout the lifecycle and helping teams build solutions securely from the outset.

Responsibilities

• Lead improvements to the Secure Software Development Lifecycle, aligned to NIST CSF 2.0.
• Act as an Application Security / Project Guardian, embedding security across delivery lifecycles.
• Review and tighten existing vulnerability management practices.
• Define and document end-to-end security requirements in a clear, accessible format for delivery teams.
• Ensure security controls are applied at the right stage of projects, regardless of entry point.
• Bring together application, platform, cloud, and infrastructure security to ensure cohesive SDLC controls.
• Validate that back-end and platform security controls are correctly implemented and fit for purpose.
• Operate as a trusted internal security advisor, balancing risk, delivery timelines, and business objectives.

Requirements

• Proven experience improving Secure SDLC maturity within complex environments.
• Strong knowledge of NIST CSF, application security, and secure-by-design principles.
• Experience working with ISMS environments.
• Hands‑on capability across vulnerability management, security assessments, and control validation.
• Ability to translate security requirements into practical, delivery‑ready guidance.
• Experience working autonomously across multiple teams with competing priorities.
• Strong understanding of cloud and platform security (AWS, Kubernetes, APIs, IAM).
• Pragmatic approach to risk management in agile delivery environments.

We are an equal opportunities employer and welcome applications from all suitably qualified persons regardless of their race, sex, disability, religion / belief, sexual orientation or age.