> Markdown version of [/jobs/ext/2793199-security-consultant](https://www.wearedevelopers.com/jobs/ext/2793199-security-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Consultant

- **Company:** Fruition Group
- **Location:** UK
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Amazon Web Services, Cloud Computing, Identity and Access Management, Systems Development Life Cycle, Software Engineering, Software Vulnerability Management, Information Security Management System, Cloud Platform System, Software Security, Backend, Kubernetes
- **Published:** September 8, 2026
- **Apply:** https://www.collegerecruiter.com/job/2815733081-security-consultant

## About the Role

* Proven experience improving Secure SDLC maturity within complex environments.
 * Strong knowledge of NIST CSF, application security, and secure-by-design principles.
 * Experience working with ISMS environments.
 * Hands-on capability across vulnerability management, security assessments, and control validation.
 * Ability to translate security requirements into practical, delivery-ready guidance.
 * Experience working autonomously across multiple teams with competing priorities.
 * Strong understanding of cloud and platform security (AWS, Kubernetes, APIs, IAM).
 * Pragmatic approach to risk management in agile delivery environments.

## Description

* Lead improvements to the Secure Software Development Lifecycle, aligned to NIST CSF 2.0.
 * Act as an Application Security / Project Guardian, embedding security across delivery lifecycles.
 * Review and tighten existing vulnerability management practices.
 * Define and document end-to-end security requirements in a clear, accessible format for delivery teams.
 * Ensure security controls are applied at the right stage of projects, regardless of entry point.
 * Bring together application, platform, cloud, and infrastructure security to ensure cohesive SDLC controls.
 * Validate that back-end and platform security controls are correctly implemented and fit for purpose.
 * Operate as a trusted internal security advisor, balancing risk, delivery timelines, and business objectives.


## Related Videos

- [Developing the Backend with Stefan Lingler, CTO at Shpock](https://www.wearedevelopers.com/videos/100360-developing-the-backend-with-stefan-lingler-cto-at-shpock)
- [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way)
- [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Nest.js - TypeScript in the backend can also be clean](https://www.wearedevelopers.com/videos/1033-nest-js-typescript-in-the-backend-can-also-be-clean)
- [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders)

## Related Articles

- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)