> Markdown version of [/jobs/ext/332697-security-design-consultant](https://www.wearedevelopers.com/jobs/ext/332697-security-design-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Design Consultant

- **Company:** HCL Technologies
- **Location:** London, UK
- **Experience:** Expert
- **Contract:** Temporary contract
- **Skills:** Agile Methodology, Cloud Computing Security, Cyber Security, DevOps, Identity and Access Management, Open Web Application Security, PCI Data Security Standards, Restful APIs, Vulnerability Analysis
- **Published:** June 6, 2026
- **Apply:** https://www.apply4u.co.uk/jobs/x/38360717/

## About the Role

design.Work closely with engineering, architecture, product and delivery teams in Agile and DevOps environments to embed security by design.Support compliance with security and regulatory frameworks including ISO 27001, PCI DSS, OWASP and internal standards.Review security posture of vendors and outsourced services, providing due diligence and third-party risk assurance.Present security findings, risk opinions and design recommendations clearly to both technical and non-technical stakeholders, including senior leadership.Required Experience and SkillsExtensive experience in cyber security, security consulting, risk assessment or security architecture within regulated environments, ideally financial services.Strong knowledge of threat modelling methodologies, secure design principles, attack vectors and mitigating controls across network, application and cloud domains.Practical understanding of cloud security, secure application delivery, third-party risk management and access management
practices.Experience applying recognised frameworks and standards such as ISO 27001, PCI DSS, OWASP, NIST and enterprise security control frameworks.Ability to translate complex technical risks into business language and provide clear, evidence-based recommendations.Exposure to contemporary architectures. E.g. RESTful APIs and containerised microservicesStrong stakeholder management, written communication and presentation skills, with confidence engaging senior managers and control functions.Qualifications and CertificationsEssential: Demonstrable experience in security design, cyber risk, security consulting or related cyber security disciplines.Desirable: Professional certifications such as CISSP, CISM, CCSP, CEH, GIAC or equivalent.Preferred background: Experience supporting cloud transformation, digital delivery, third-party assurance and regulated change programmes.Desirable AttributesCommercially aware and able to balance risk reduction with pragmatic business delivery.Capable of
working independently while influencing multidisciplinary teams and senior stakeholders.Understanding or awareness about banking systemsComfortable operating in fast-paced, high-pressure environments with changing priorities.Structured, detail-oriented and focused on producing high-quality, repeatable outcom



## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform)
- [Rest API Antipatterns](https://www.wearedevelopers.com/videos/100208-rest-api-antipatterns)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Agile work at CARIAD – Creating a customer web application for controlling the vehicle ](https://www.wearedevelopers.com/videos/200-agile-work-at-cariad-creating-a-customer-web-application-for-controlling-the-vehicle)
- [DevOps Maturity Check – a way to balance autonomy and alignment](https://www.wearedevelopers.com/videos/58-devops-maturity-check-a-way-to-balance-autonomy-and-alignment)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)