> Markdown version of [/jobs/ext/2920430-senior-cyber-security-consultant](https://www.wearedevelopers.com/jobs/ext/2920430-senior-cyber-security-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Cyber Security Consultant - **Company:** QinetiQ Group plc - **Location:** Great Malvern, UK - **Experience:** Expert - **Salary:** £65,700.0 - £73,000.0 - **Contract:** Permanent contract - **Skills:** Cyber Security, Mitre Att&ck, Vulnerability Analysis - **Published:** September 15, 2026 - **Apply:** https://careers.qinetiq.com/talentcommunity/apply/1436182633/?locale=en_GB ## About the Role * A good understanding of cyber security risk and its impact on business operations, helping organisations make informed decisions and strengthen resilience * Experience applying cyber security principles, standards and best practices to assess risk, improve compliance and support secure business outcomes * The ability to develop pragmatic risk mitigation strategies that balance security requirements with operational and business needs * Proven experience identifying and communicating security risks across technology, systems and business processes, providing clear recommendations to stakeholders * The ability to build strong relationships with customers and stakeholders, confidently presenting complex information to both technical and non-technical audiences * A good understanding of relevant NIST frameworks and ISO 27001 standards and how to apply in practice, * STEM degree or equivalent or relevant experience We value difference and we don't have a fixed idea when it comes to background or education, provided you can show the required level of experience and willingness to learn then we would like to hear from you. This role is 37 hours per week based at either our Portsmouth, Farnborough, Malvern, Amesbury, Lincoln or Bristol site with a minimum average site attendance of three days per week. Customer travel will be required. ## Description As a Senior Cyber Security Consultant, you will have the opportunity to work with customers providing cyber security consultancy with business or operational impact amongst a strong collaborative supportive team of consultants. Day-to-day, you'll be involved in a multitude of cyber security activities including generating business risk models, leading cyber security audit processes, cyber security vulnerability analysis and identifying and articulating mitigations for cyber risk developing cyber security risk case to customers. Your responsibilities will include: * Leading the development of business risk models and supporting documentation to assess cyber security risks, enabling informed operational decision making and business planning across a variety of sectors using recognised frameworks such as NIST and UK Government standards * Leading and delivering cyber security audits against established standards, including ISO27001, to evaluate compliance, identify areas for improvement and support organisational security objectives * Leading detailed vulnerability assessments and cyber risk analyses to provide a comprehensive understanding of security maturity, threat exposure and organisational resilience, leveraging frameworks such as NIST, MITRE ATT&CK and UK Government guidance * Identifying, assessing and clearly communicating appropriate mitigation strategies to reduce cyber risk within specific business, operational and threat environments, ensuring recommendations align with organisational priorities * Developing robust cyber security risk cases that articulate threats, vulnerabilities, business impacts and risk treatment options, supporting strategic decision making and investment planning * Applying Secure by Design principles throughout business and operational activities, ensuring security considerations are embedded from the outset of projects, systems and processes to enhance overall cyber resilience ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR](https://www.wearedevelopers.com/videos/39-how-to-cause-or-prevent-a-massive-data-breach-secure-coding-and-idor) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [UK Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/326-uk-business-culture-and-etiquette) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)