Senior Cloud Security Consultant — AWS & Secure DevOps

CyberNorth; Newcastle upon Tyne; On-site; GBP 65,000 - 100,000; Full time

Job summary

CyberNorth in the United Kingdom is seeking a hands-on Security Consultant who can blend technical delivery with client-facing advisory. You will assess, design, and govern security controls across cloud environments, applications, APIs and infrastructure to drive secure outcomes.

You will challenge assumptions, influence stakeholders, and work with engineering and operations to embed security into delivery pipelines, with a focus on AWS, IAM, data protection, SIEM, and incident response.

Qualifications

• Experience securing cloud environments, preferably AWS.
• Ability to review or implement secure cloud architectures and landing zones.
• Knowledge of cloud-native security services and best practices for workload, storage, network and platform protection.
• Experience with threat detection engineering, incident triage and response coordination.

Responsibilities

• Assess current-state security maturity, identify gaps, and define remediation roadmaps.
• Lead security architecture reviews across cloud, applications, IAM, data protection and detection/response.
• Provide expert consulting on security strategy, risk reduction, and security operating model improvements.
• Design and review secure cloud landing zones, network segmentation, logging/monitoring patterns, and guardrails.
• Partner with engineering, DevOps and operations to embed security into delivery pipelines.

Skills

Cloud security architecture

Cloud security (AWS)

SIEM

IAM & access management

Threat detection & incident response

Security governance & risk

Security controls design

Job description

CyberNorth in the United Kingdom is seeking a hands-on Security Consultant who can blend technical delivery with client-facing advisory. You will assess, design, and govern security controls across cloud environments, applications, APIs and infrastructure to drive secure outcomes.

You will challenge assumptions, influence stakeholders, and work with engineering and operations to embed security into delivery pipelines, with a focus on AWS, IAM, data protection, SIEM, and incident response.