Cyber Security Consultant

You Will Be Involved In

• Delivering threat modelling for complex systems, cloud environments and enterprise architectures
• Running threat modelling workshops with technical and business stakeholders
• Reviewing solution architectures and performing system decomposition
• Conducting security risk assessments and producing practical, risk-based recommendations
• Developing security monitoring strategies, threat detection requirements and security use cases
• Providing security guidance across multiple concurrent projects
• Supporting secure solution design and architecture review activity
• Working alongside Security Operations Centre and detection engineering teams
• Producing reports, documentation and presentations for technical and senior audiences
• Engaging with technical specialists, project teams and senior business stakeholders across secure environments

This role would suit someone with strong threat modelling and security architecture experience who has worked in a client-facing consultancy or advisory setting and is looking to develop further across security monitoring strategy, detection requirements and secure-by-design delivery., * UK National with active SC Clearance - essential, non-negotiable

• Proven experience delivering threat modelling for complex systems, cloud environments or enterprise architectures
• Experience working in a client-facing consultancy or advisory role, or providing security guidance across multiple projects
• Strong understanding of secure solution design, architecture review and system decomposition
• Demonstrable experience conducting security risk assessments and producing risk-based recommendations
• Experience developing security monitoring strategies, threat detection requirements and security use cases
• Hands-on exposure to SIEM tooling - Splunk preferred, though Sentinel, Elastic Security, CrowdStrike or similar are acceptable
• Excellent workshop facilitation and stakeholder engagement skills
• Strong report writing, documentation and presentation skills
• Comfortable travelling to Bristol, Manchester, the North West and London when required
• Experience delivering cyber security services within the UK public sector or other highly regulated environments
• Familiarity with government security principles, secure-by-design approaches and risk management frameworks
• Knowledge of threat modelling methodologies such as STRIDE, PASTA, ATT&CK or equivalent
• Experience working with Security Operations Centres and detection engineering teams
• Relevant certifications such as CISSP, SABSA, TOGAF, Microsoft Security or CREST, although practical experience is valued more highly, Tektora are looking to speak with SC Cleared Cyber Security Consultants who are open to permanent opportunities and keen to develop further across threat modelling, secure design and security monitoring strategy.