Technical Security Consultant

Cyber Security training courses; Greater London; Hybrid; GBP 70,000 - 100,000; Full time

Job summary

Cyber Security training courses in London is seeking a Technical Security Consultant to support development and continuous improvement of a Secure SDLC capability. This role combines Secure SDLC, DevSecOps, application security and architecture to assess control effectiveness across modern engineering environments.

You will review security tooling, map controls to frameworks like NIST SSDF and OWASP SAMM, engage with engineering teams, and contribute to assurance reporting and remediation

Qualifications

• Experience in Secure SDLC, DevSecOps or application security.
• Good understanding of security controls throughout the software development lifecycle.
• Experience with security assurance, control frameworks, architecture or capability mapping.
• Knowledge of application security tooling such as GitHub Advanced Security, CodeQL, Dependabot, Fortify, Qualys or Checkov beneficial.
• Strong stakeholder management with the ability to challenge technical and engineering teams.
• Knowledge of vulnerability management, exception governance and remediation processes advantageous.
• SC clearance or ability to obtain SC clearance required.

Responsibilities

• Assess Secure SDLC controls across design, development, testing, release and operation.
• Review security architecture, tooling coverage, integration dependencies and control gaps.
• Assess capabilities including SAST, SCA, DAST, secrets scanning, IaC scanning, API security, threat modelling and CI/CD security.
• Map controls against frameworks including NIST SSDF, OWASP SAMM and OWASP DSOMM.
• Review security tooling and integrations across GitHub, GitLab, CI/CD and cloud environments.
• Conduct control-effectiveness assessments, evidence reviews and maturity/gap analysis.
• Facilitate workshops with engineering, security and product teams.
• Support KPI/KRI development, assurance reporting and remediation oversight.

Skills

Secure SDLC

DevSecOps

Application Security

Security architecture

Tooling coverage

GitHub Advanced Security

CodeQL

Dependabot

SC clearance

Tools

GitHub Advanced Security

CodeQL

Dependabot

Fortify

Qualys

Checkov

Job description

Technical Security Consultant required to support the development and continuous improvement of a Secure Software Development Lifecycle (SDLC) capability. This is a technical assurance role combining Secure SDLC, DevSecOps, application security and architecture expertise to assess control effectiveness, tooling coverage and adoption across modern engineering environments.

Key Responsibilities

• Assess Secure SDLC controls across design, development, testing, release and operation.
• Review security architecture, tooling coverage, integration dependencies and control gaps.
• Assess capabilities including SAST, SCA, DAST, secrets scanning, IaC scanning, API security, threat modelling and CI/CD security.
• Map controls against frameworks including NIST SSDF, OWASP SAMM and OWASP DSOMM.
• Review security tooling and integrations across GitHub, GitLab, CI/CD and cloud environments.
• Conduct control-effectiveness assessments, evidence reviews and maturity/gap analysis.
• Facilitate workshops with engineering, security and product teams.
• Support KPI/KRI development, assurance reporting and remediation oversight.

Key Experience

• Strong Secure SDLC, DevSecOps or Application Security experience.
• Good understanding of security controls throughout the software development lifecycle.
• Experience with security assurance, control frameworks, architecture or capability mapping.
• Knowledge of application security tooling such as GitHub Advanced Security, CodeQL, Dependabot, Fortify, Qualys or Checkov beneficial.
• Strong stakeholder management with the ability to challenge technical and engineering teams.
• Knowledge of vulnerability management, exception governance and remediation processes advantageous.
• SC clearance or ability to obtain SC clearance required.