Security Design Consultant

Jobtailor; Leeds; On-site; GBP 75,000 - 110,000; Full time

Job summary

Jobtailor in Leeds is seeking a Security Architect to develop and design secure solutions, deconstruct architectures, identify threats, and translate them into actionable risk assessments for multiple projects.

You will communicate complex security concepts to both technical and non-technical stakeholders, contribute to shaping the security strategy, and align change initiatives with ISO 27000, PCI DSS, NIST and OWASP standards; CISSP/CISM/CCSP/CEH/OSCP certifications are highly regarded.

Qualifications

• Ability to develop and design secure solutions and produce Security Design documentation.
• t

Responsibilities

• Develop and design secure solutions and produce Security Design documentation describing the controls.
• Deconstruct solutions and network architectures
• Identify and mitigate threats and vulnerabilities associated with proposed solutions
• Evaluate the soundness of solutions using industry-standard practices such as STRIDE and MITRE
• Interpret threats into risks and assist the business in assessing likelihood and impact
• Communicate technical concepts to technical and non-technical collaborators
• Produce and articulate Security Designs to stakeholders across projects and the business
• Weigh the risks and benefits of competing security design options
• Work on multiple challenging projects simultaneously
• Help ensure security is developed across the change portfolio and contribute to shaping the Security Strategy

Skills

Security Design

Threat Mitigation

STRIDE Evaluation

Risk Assessment

Cloud Security

Security Standards

Stakeholder Communication

Education

CISSP Certification

CISM Certification

CCSP Certification

CEH Certification

OSCP Certification

Tools

Public Cloud Environments

Private Cloud Environments

Job description

• Develop and design secure solutions and produce Security Design documentation describing the controls
• Deconstruct solutions and network architectures
• Identify and mitigate threats and vulnerabilities associated with proposed solutions
• Evaluate the soundness of solutions using industry-standard practices such as STRIDE and MITRE
• Interpret threats into risks and assist the business in assessing likelihood and impact
• Communicate technical concepts to technical and non-technical collaborators
• Produce and articulate Security Designs to stakeholders across projects and the business
• Weigh the risks and benefits of competing security design options
• Work on multiple challenging projects simultaneously
• Help ensure security is developed across the change portfolio and contribute to shaping the Security Strategy

Requirements

• Ability to develop and design secure solutions and produce Security Design documentation
• Ability to deconstruct a solution or network architecture
• Ability to identify and mitigate threats and vulnerabilities associated with proposed solutions
• Ability to evaluate solutions using industry-standard practices such as STRIDE and MITRE
• Ability to interpret threats into risks and assess likelihood and impact
• Ability to communicate technical concepts to technical and non-technical collaborators
• Ability to produce and articulate Security Designs to project and business stakeholders
• Ability to weigh risks and benefits of competing security design options
• Ability to work on multiple challenging projects simultaneously
• Awareness of security standards including ISO 27000 series, PCI DSS, COBIT, NIST, and OWASP
• Security Management certification such as CISSP, CISM, CCSP, or equivalent would be useful
• Technical Security certification such as CEH, OSCP, or equivalent would be useful
• Experience of public and/or private cloud environments would be useful

Core Competencies

Demonstrates expertise in developing secure solutions and producing comprehensive Security Design documentation while effectively communicating technical concepts to diverse stakeholders. Proficient in evaluating risks and benefits of security designs using industry-standard practices and frameworks.

Highest-signal resume keywords

• Security Design Documentation
• Threat Mitigation
• STRIDE Evaluation
• ISO 27000 Series Awareness
• CISSP Certification

ATS Optimization Keywords

Hard Skills

• Secure Solution Development
• Network Architecture Deconstruction
• Threat Identification
• Risk Assessment
• Security Design Articulation

Soft Skills

• Technical Communication
• Collaboration

Certifications & Qualifications

• CISSP
• CISM
• CCSP
• CEH
• OSCP

Industry Keywords

• PCI DSS
• COBIT
• NIST
• OWASP

Tools & Technologies

• Public Cloud Environments
• Private Cloud Environments