Security Analyst - Contract

We’re looking for an experienced Security Analyst to support a security assurance programme within a complex software and technology environment.

You’ll work closely with engineering, infrastructure and security teams to review existing applications, assess security risks and ensure appropriate assurance documentation is in place.

This is a hands-on role focused on Security by Design, cyber assurance, risk assessments and technical documentation. Key Responsibilities

• Conduct security assurance reviews across applications and systems
• Assess existing technical documentation and identify security gaps
• Support Secure by Design activities and assessments
• Review application architectures, infrastructure and security controls
• Gather technical information and supporting evidence from engineering teams
• Identify security risks, control weaknesses and areas requiring remediation
• Produce clear security assessments and assurance documentation
• Maintain security records and track outstanding actions
• Work with technical stakeholders to resolve security and compliance issues
• Support ongoing security governance and audit requirements

• Secure by Design principles
• Cyber Security Assurance / Risk Management
• Experience conducting application or system security assessments
• Strong understanding of security controls and risk identification
• Experience reviewing technical architectures and security documentation
• Knowledge of OWASP, ISO 27001 or NIST
• Understanding of software development lifecycles (SDLC)
• Exposure to cloud environments such as AWS or Azure
• Experience gathering technical evidence and producing assurance documentation
• Strong stakeholder engagement skills
• Active SC Clearance

Desirable Experience

• Security+, CISSP, CISA or CRISC certifications
• Experience with Jira or Confluence
• Application security or software engineering environments
• Experience supporting Agile delivery teams

About You

You’ll be a detail-oriented Security Analyst with a strong background in cyber assurance and Secure by Design.

You’ll be comfortable engaging with developers, architects and infrastructure teams, challenging technical information and producing clear, structured security documentation.

This role would suit someone with experience as a Security Analyst, Cyber Assurance Analyst, Security Assurance Consultant or Cyber Risk Analyst.