Security Consultant

We are currently supporting a client in the search for an experienced Security Consultant to support their Cyber Security function. This is an excellent opportunity to work within a high-profile security consultancy and design team, contributing to the delivery of secure-by-design solutions across a large-scale transformation portfolio., The successful candidate will play a key role in shaping security strategy, assessing cyber risks and ensuring robust security controls are embedded across modern technology platforms and cloud-native environments., * Develop secure solution designs and produce detailed security design documentation

• Review and deconstruct solution and network architectures to identify security risks
• Conduct threat modelling and assess vulnerabilities using industry-standard methodologies such as STRIDE and MITRE
• Translate technical threats into business risks, supporting stakeholders with likelihood and impact assessments
• Provide clear security guidance to both technical and non-technical stakeholders
• Support security decision-making across multiple concurrent projects
• Evaluate and recommend appropriate security controls and design approaches
• Ensure security standards and regulatory requirements are considered throughout delivery lifecycles

• Proven background delivering security consultancy services, including threat modelling, secure design and influencing security decisions
• Strong understanding of cloud-native platforms and modern architectures
• Experience applying a security-led approach rather than infrastructure-led responses
• Strong risk-based mindset with the ability to link threats, risks and controls across end-to-end systems
• Practical knowledge of security controls and their implementation
• Experience working with security standards and regulatory frameworks such as PCI DSS and data protection requirements
• Strong end-to-end security design capability
• Ability to demonstrate ownership and contribution to security decisions within projects

Desirable Experience:

• Knowledge of security frameworks and standards including ISO 27001, PCI DSS, COBIT, NIST and OWASP
• Relevant certifications such as CISSP, CISM, CCSP, CEH or OSCP
• Experience working within public and/or private cloud environments

Huntress Search Ltd acts as a Recruitment Agency in relation to all Permanent roles and as a Recruitment Business in relation to all Temporary roles.