> Markdown version of [/jobs/ext/2307832-cyber-security-consultant](https://www.wearedevelopers.com/jobs/ext/2307832-cyber-security-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Security Consultant

- **Company:** InfoSec People Ltd
- **Location:** UK
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Software as a Service, Cyber Security, Continuous Integration, Database Security, Identity and Access Management, MongoDB, OAuth, OpenID, Platform as a Service (PAAS), Role-Based Access Control, Zero Trust Network Access, Software Security, Atlassian Tools, Software Coding, Elastic Beanstalk, Terraform
- **Published:** August 30, 2026
- **Apply:** https://www.collegerecruiter.com/job/2815108497-cyber-security-consultant

## About the Role

* Experience in a cyber security advisory, consulting or internal consulting-style role
 * Strong grounding in Identity & Access Management (SSO, JWT, OAuth/OIDC, RBAC/ABAC, least privilege)
 * Solid understanding of API security and database security fundamentals
 * Working knowledge of Terraform, CI/CD and automation concepts (hands-on coding not required)
 * Ability to assess risk, challenge designs constructively and influence without authority
 * Comfortable engaging senior engineers, architects and product stakeholders
 * A pragmatic mindset - focused on enabling delivery, not blocking it

## Description

We're working with a major UK retailer that's continuing to invest heavily in cyber security advisory capability across its digital and platform estate.

This is a consultative role focused on guiding, influencing and enabling teams to design and operate secure SaaS and PaaS platforms at scale.

Rather than hands-on operational delivery, you'll act as a trusted security advisor, partnering with engineering, platform and product teams to reduce risk, improve configuration hygiene and embed secure-by-design practices., * Act as a Cyber Security Consultant to platform and engineering teams across SaaS/PaaS services (Microsoft, Google, Atlassian, MongoDB Atlas)

 * Lead security reviews and advisory assessments focused on configuration, access, identity and platform risk
 * Provide clear, pragmatic guidance on IAM, least privilege, Zero Trust and secure platform patterns
 * Advise on API and database security design, controls and threat mitigation
 * Support teams to embed security into CI/CD pipelines and IaC workflows, advising on guardrails rather than owning build
 * Translate security risk into practical recommendations that delivery teams can implement quickly
 * Produce guidance, standards and documentation, and run workshops and knowledge-sharing sessions
 * Act as a bridge between security, engineering, vendors and third parties


## Related Videos

- [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect)
- [Lessons learned from observing a billion API requests](https://www.wearedevelopers.com/videos/1574-lessons-learned-from-observing-a-billion-api-requests)
- [40 Minutes to Build a Serverless COVID-19 REST and GraphQL APIs](https://www.wearedevelopers.com/videos/208-40-minutes-to-build-a-serverless-covid-19-rest-and-graphql-apis)
- [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak)

## Related Articles

- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Security Basics for Vibe Coders](https://www.wearedevelopers.com/magazine/598-security-basics-for-vibe-coders)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)