Senior Security Consultant (Platform Security Engineer) - Permanent

RiverSafe; Greater London; Hybrid; GBP 90,000 - 140,000; Full time

Job summary

RiverSafe is seeking a Senior Security Consultant to join our hands-on security practice. You’ll work at the intersection of security consulting, cloud engineering, and DevSecOps, delivering real technical outcomes for clients while shaping proposals and driving presales.

In London, this hybrid role requires 2–3 days in the office weekly. You’ll lead security assessments, design controls across AWS/Azure/GCP, embed security into CI/CD, and present findings to CISO-level audiences.

Qualifications

• Proven cloud security experience across AWS, Azure and/or GCP.
• Hands-on with Terraform, Kubernetes, and IaC security.
• DevSecOps mindset with CI/CD, SAST/DAST, shift-left security.
• Identity and access security: Zero Trust, MFA, SSO.
• Client-facing with ability to present to a CISO.
• Familiarity with NIST CSF, CIS Controls, or ISO 27001.

Responsibilities

• Deliver security assessments, gap analyses, and maturity reviews across cloud and platform environments.
• Designing and implementing security controls across AWS, Azure, and GCP.
• Embedding security into CI/CD pipelines and championing DevSecOps practices.
• Leading client workshops and presenting findings to technical and executive audiences.
• Supporting the full presales cycle - from qualification through to proposal and award.
• Contributing to detection engineering, SIEM strategy, and SOC governance.

Skills

Cloud security

AWS/Azure/GCP

Terraform

Kubernetes

IaC security

DevSecOps

CI/CD security

Zero Trust

RBAC/MFA/SSO

Executive communication

Presales / client-facing

Tools

Terraform

Kubernetes

Job description

Are you a security engineer who loves working with clients as much as you love the technical craft? We're growing our security practice at RiverSafe and looking for a Senior Security Consultant to join us in a hands-on, client-facing role.

The Role:

This isn't a back-office position. You'll sit at the intersection of security consulting, cloud engineering, and DevSecOps - delivering real technical outcomes for clients while also shaping proposals, driving presales, and growing accounts.

What you'll be doing:

• Delivering security assessments, gap analyses, and maturity reviews across cloud and platform environments
• Designing and implementing security controls across AWS, Azure, and GCP
• Embedding security into CI/CD pipelines and championing DevSecOps practices
• Leading client workshops and presenting findings to technical and executive audiences
• Supporting the full presales cycle - from qualification through to proposal and award
• Contributing to detection engineering, SIEM strategy, and SOC governance

What you'll bring:

• Strong cloud security experience across AWS, Azure, and/or GCP
• Hands-on with Terraform, Kubernetes, and IaC security
• DevSecOps mindset - CI/CD, SAST/DAST, shift-left security
• Identity & access security - Zero Trust, RBAC, MFA, SSO
• Client-facing confidence - you can present to a CISO as comfortably as a developer
• Familiarity with NIST CSF, CIS Controls, or ISO 27001

Relevant certifications (CISSP, CISM, AWS/Azure security, CKS) are a bonus, but breadth across domains matters more than any single credential.

London / Hybrid: 2-3 days per week in the office is required.