> Markdown version of [/jobs/ext/1579248-principal-security-consultant](https://www.wearedevelopers.com/jobs/ext/1579248-principal-security-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Principal Security Consultant

- **Company:** Experis
- **Location:** Gloucester, UK (Remote available)
- **Salary:** £70,000.0 - £80,000.0
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Javaserver Pages, SC Clearance
- **Published:** July 31, 2026
- **Apply:** https://find.jobs/jobs-near-me/apply/ats-redirect/?id=2899170916-2

## About the Role

* Security Assurance and Secure by Design
 * Defence, Government or Critical National Infrastructure
 * Security governance, risk management and accreditation
 * Building trusted client relationships and influencing stakeholders
 * Producing high-quality assurance documentation

Desirable experience includes:

 * JSP 440 / JSP 604
 * NIST, CAF, ISO 27001 or Cyber Essentials
 * Active SC Clearance (DV advantageous)

Professional certifications such as CISSP, CISM or CRISC are highly desirable. Chartered Cyber Security Professional (or working towards Chartered status) would be a significant advantage.

## Description

We're recruiting a Principal Security Consultant to lead Security Assurance and Secure by Design activities across complex client environments. You'll act as a trusted advisor, working with senior stakeholders to embed security throughout the system lifecycle while helping shape secure, resilient solutions.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer)
- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Less Is More: How Lagom and Agile Can Create Harmonious Workflows](https://www.wearedevelopers.com/videos/1993-less-is-more-how-lagom-and-agile-can-create-harmonious-workflows)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Security Basics for Vibe Coders](https://www.wearedevelopers.com/magazine/598-security-basics-for-vibe-coders)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer)