Security Consultant

HCL Technologies Limited; Leeds; On-site; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Vacation entitlement

Term life insurance

Business Travel insurance

Diversity Council involvement

Job summary

HCL Technologies Limited in the United Kingdom is seeking a Security Consultant to join our Security Consultancy and Design team across multiple locations (Manchester, Leeds, Bristol, Halifax, Edinburgh).

You’ll apply Agile methods, perform threat modelling, design secure solutions, document key security controls, and communicate complex concepts to diverse audiences. A strong background in cyber security domains and modern enterprise tech is essential.

Qualifications

• Broad knowledge of modern Enterprise technologies including Cloud and AI.
• Experience with threat modelling using STRIDE and MITRE ATT&CK.
• Knowledge of cyber security domains such as endpoint, network, cryptography and IAM.
• Awareness of industry security standards like ISO 27000, PCI DSS, COBIT, NIST, OWASP.

Responsibilities

• Apply Agile methodologies to support engineers and deliver on multiple product initiatives.
• Threat model by deconstructing technical solutions, identifying threats and assessing risks.
• Analyse risks and benefits of design options to support secure architectural decisions.
• Design secure solutions and document key security controls and adherence to standards.
• Define security testing requirements and assess findings.
• Communicate security direction, governance, assurance and guidance to technical and non-technical audiences.

Skills

Threat modelling

Cloud & AI familiarity

RESTful APIs

Containerised microservices

Security governance

Tools

STRIDE

MITRE ATT&CK

Job description

We are a $13+ billion global technology company, home to more than 224,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud, and AI, powered by a broad portfolio of technology services and products.

HCLTech is a globally recognized leader in the Tech and IT industry, but we’ve never forgotten the startup mindset that got us here. We’ve always approached our work with an idea-first attitude because every one of our accomplishments —no matter how big or small —can be traced back to an idea’s single spark.

It’s that spark —that inner drive —that sets our people apart from our competitors. It enables us not just to pull off game-changing feat after game-changing feat but to better our world in the process. We want you to find your spark. Because that’s what drives you to be better, be more and ultimately, be more fulfilled.

To learn more about how we can supercharge progress for you, visit www.hcltech.com

Role Title – Security Consultant

Our Security Consultancy and Design team are continuing their search for Cyber Security Consultants who have a broad knowledge of Cyber Security domains and controls working across a wide range of computing platforms.

Location(s)

Manchester, Leeds, Bristol, Halifax, Edinburgh.

What you'll do:

• Applying Agile methodologies to support engineers and deliver on multiple challenging product initiatives simultaneously, driving engineering excellence.
• Threat model by deconstructing technical solutions, identifying threats and vulnerabilities and assessing risks.
• Use experience to analyse the risks and benefits of design options to support making safe architectural decisions.
• Design secure solutions documenting the key security controls and adhering to security standards.
• Define security testing requirements and assess findings.
• Effectively communicate technical concepts to both technical and non-technical audiences, providing security direction, governance, assurance and guidance.

What we’re looking for:

• Dynamic solution-oriented individual bringing energy to a rapidly evolving environment with an ability to work well under pressure.
• Broad knowledge of modern Enterprise technologies including Cloud and AI
• Exposure to contemporary architectures eg. RESTful APIs and containerised microservices.
• Up-to date on emerging threats and experienced with threat modelling frameworks eg. STRIDE / MITRE ATT&CK.
• Significant knowledge of cyber security domains and how they apply to Enterprise business environments eg. endpoint, network, cryptography and IAM.

The nice to haves:

• Awareness of industry related security standards such as ISO 27000 series, PCI DSS, COBIT, NIST, OWASP.
• Certifications in security management eg. CISSP / CISM / CCSP or equivalent.
• Certifications in technical security domains eg. CEH / OSCP or equivalent.
• Experience of Public and or Private cloud environments.

• A supportive, diverse, and global team with a brilliant culture.
• Competitive compensation and benefits that includes vacation per year, various insurances like Term life and Business Travel insurance. These are apart from the statutory benefits applicable in the country. Employee benefits are regulated by an internal policy that contains full details regarding the entitlement and conditions for the benefits as per the law of the land.
• Great opportunities to make the role your own, upskill yourself and get involved with exciting projects.
• Total Wellbeing is our focus. Alongside your professional excellence, you join the likeminded colleagues to create a larger impact within the company and society at large in your chosen area of passion - CSR Council, Diversity Council, Women Connect, Sparks – Engagement Champion to name a few.
• To know more about us visit – www.hcltech.com
• For more information on how we process your personal data, please refer to HCLTech’s Candidate Data Privacy Notice.