Senior Cyber Security Consultant

AtkinsRéalis; Bristol; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A leading engineering consultancy in the UK is seeking a Senior Cyber Security Consultant to protect clients in the Aerospace, Defence, and Critical National Infrastructure sectors from evolving cyber threats. The role involves leading projects, providing security governance, and mentoring junior consultants within a dynamic and supportive work environment. The ideal candidate will possess relevant cyber security certifications and a strong background in information assurance, with opportunities for career advancement. Remote and flexible working options available.

Benefits

Flexible working

Career development opportunities

Supportive working environment

Qualifications

• Experience delivering technical cyber security consultancy.
• Strong background in information assurance.
• Excellent verbal and written communication skills.
• Willingness to travel throughout the UK and occasionally overseas.
• Experience in the UK Defence sector.
• Commitment to ongoing professional development.

Responsibilities

• Lead and deliver risk assessments and security governance.
• Develop and maintain security-related artefacts and policies.
• Identify and pursue new business opportunities.
• Mentor and support colleagues.
• Provide cyber security advice and guidance for clients.

Skills

Technical cyber security consultancy

Information assurance

Risk assessments

Communication skills

Project management

Technical leadership

Education

Relevant professional certifications (e.g., ISO27000, NIST, CISMP)

Experience in UK Defence sector

Tools

SCADA

PLC and RTU packages

Cyber security standards (e.g., IEC 62443)

Job description

Job Description

Leading the edge of transformation.

Are you ready to take up a vital role in shaping some of our exciting projects? How about joining our talented team, where everyone has a voice, and together we face our clients' problems head‑on. It's a diverse and inclusive work environment where world‑class talent knows no distinctions.

We know that different people have different priorities, which is why we're here to support you. Flexible and remote working is a central part of our culture, so talk to us about what's ideal for you – from reduced weeks to buying more leave over school holidays. If you're returning from a career break, ask us how we can help you transition back into work with us.

We deliver technically challenging and time‑critical projects across multiple sectors, including Aerospace, Defence and Critical National Infrastructure (CNI), and Operational Technology (OT). Due to our continued growth, we have open positions in our GRC, Security Architecture, Threat and Vulnerability, and Operational Technology teams. Our role as trusted advisors allows us to offer rewarding careers to those seeking to enhance their skills and experience in dynamic environments.

As a Senior Cyber Security Consultant, you'll play a pivotal role in protecting Aerospace, Defence and CNI/OT clients from evolving cyber threats. You'll lead projects that shape national security, working alongside industry experts in a supportive, innovative environment. We offer clear pathways for career advancement, professional development, and opportunities to mentor junior consultants.

This role will suit experienced qualified professionals who are looking to continue to develop and progress their career and provide real‑world benefit to clients. In return, we offer a challenging and rewarding role, career development, an empowered and supportive working environment with a competitive reward package. We invest in your professional growth through certifications, training and leadership pathways.

You will work on business‑as‑usual, technical refresh and new project environments, applying technical knowledge and innovative thinking in complex and non‑routine contexts. You will help clients establish robust security governance, perform risk assessments and deploy effective security controls and solutions aligned with business risk appetite. You will be expected to contribute to winning new business, managing delivery and mentoring others within the security team. Projects are likely to involve working on client sites (although hybrid working allows us to be flexible) and may involve travel across the UK and, occasionally overseas.

Client Delivery

• Provide cyber security advice and guidance for clients in various environments.
• Lead and deliver risk assessments, security governance and deployment of effective security controls tailored to client needs.
• Develop, review and maintain security‑related artefacts, policies and procedures to ensure compliance and best practice. Manage multiple projects concurrently, balancing business and client priorities.
• Deliver high‑quality work under pressure and to tight deadlines, ensuring stakeholder expectations are met.

Technical Leadership

• Apply technical security knowledge creatively to solve complex and non‑routine challenges.
• Mentor and support colleagues, sharing expertise and fostering a culture of continuous improvement within the security team.
• Articulate cyber security concepts and recommendations to both technical and non‑technical audiences.

Business Development

• Identify and pursue new business opportunities, contributing to proposals and client engagement.
• Develop innovative solutions to emerging cyber security challenges.
• Build and maintain strong relationships with clients, stakeholders and team members.

What you can bring

• Experience delivering technical cyber security consultancy in multi‑disciplined environments, with proven ability to work both independently and collaboratively. Strong background in information assurance, including developing Information Security Management Systems (ISMS), conducting risk assessments and deploying appropriate security controls.
• Excellent verbal and written communication skills, with the ability to engage effectively with stakeholders at all levels. Proven ability to work both independently and collaboratively within a multi‑discipline, matrix organisation. Strong organisational skills, with experience managing multiple projects and tasks concurrently. Ability to deliver security outcomes to tight deadlines while maintaining quality and managing stakeholder expectations.
• Willingness and flexibility to travel throughout the UK (and occasionally overseas) as required.
• Relevant professional certifications (e.g., ISO27000, NIST Cyber Security Professional, CISMP, CISM, CISSP, CCSP, Chartered Cyber Security Professional) are highly desirable. Solid understanding of ‘Secure by Design’ methodology. Commitment to ongoing professional development and willingness to learn new frameworks and technologies.
• Experience in the UK Defence sector, including knowledge of MoD security policies and processes (e.g., HMG Information Assurance Policies, Security Policy Framework, JSP440, JSP604/JSP453).
• Experience conducting and managing security assurance and accreditation activities for Defence capabilities. Experience delivering cyber security consultancy in OT environments (e.g., energy, utilities, transportation). Be able to apply knowledge, with creative and innovative thinking, in a broad range of complex and non‑routine contexts covering people, process and technology relating to the cyber risk management of OT/ICS.
• Experience with SCADA, PLC and RTU packages and understanding how they integrate with field devices, historians and corporate IT networks. Facilitate Cyber Security risk assessments and determine the most cost‑effective deployment of security controls and solutions in line with the client’s business risk appetite to protect OT/ICS environments.
• Select appropriate technology to meet clients' security requirements and help them deploy that technology in live OT/ICS environments. Familiarity with OT cyber security standards or regulatory frameworks (e.g., IEC 62443, NIST CSF, NIS Regulations, HSE OG‑0086).
• Relevant OT cyber security qualifications (e.g., GICSP, IEC/ISA 62443). Membership of recognised security professional bodies (e.g., IISP, IS2, BCS, CIISEC).
• Ability to create client policies and procedures to meet corporate and regulatory requirements in OT environments. Experience selecting and deploying appropriate technology in live CNI environments.

Why AtkinsRéalis?

Looking for a place where you can engineer a better future? AtkinsRéalis is for you. Here, our digital‑enabled approach transforms outcomes for people and the environment. You'll have a myriad of projects to choose from and endless possibilities for career growth. More responsibility, acclaimed training programmes and flexible working are part of our inclusive culture that prioritises diversity, health and happiness.

Within ADS&T, we have signed the “Women in Defence” and “Women in Aviation and Aerospace” charters. These pledges include providing opportunities for women to succeed at all levels. We're also committed to being a Military‑friendly employer and have been recognised with the Ministry of Defence’s Gold Employer Recognition Award.

Security clearance

This role may require security clearance and offers of employment will be dependent on obtaining the relevant level of clearance. If this is necessary, it will be discussed with you at interview. The vetting process is delivered by United Kingdom Security Vetting (UKSV) and may require candidates to provide proof of residency in the UK of 5 years or longer. If applying to this role please do not make reference to (in conversation) or include in your application or CV, details of any current or previously held security clearance.

We are committed to promoting a diverse and inclusive community – a place where we can all be ourselves, thrive and develop. To help embed inclusion for all, from day one, we offer a range of family‑friendly, inclusive employment policies, flexible working arrangements and employee networks to support staff from different backgrounds. As an Equal Opportunities Employer, we value applications from all backgrounds, cultures and ability.