> Markdown version of [/jobs/ext/821470-cyber-security-consultant](https://www.wearedevelopers.com/jobs/ext/821470-cyber-security-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Security Consultant

- **Company:** CBS Butler Limited
- **Location:** London, UK (Remote available)
- **Salary:** £143,000.0 - £150,800.0
- **Contract:** Contract
- **Skills:** Amazon S3, Cyber Security, Software Vulnerability Management, Information Security Management System
- **Published:** June 2, 2026
- **Apply:** https://computerjobs.com/gb/en/mob/job/E03BF5D0195E45BF7D

## About the Role

* Experience in Cyber Security Governance, Incident Management, or Vulnerability Management.
 * Strong understanding of incident response and vulnerability management life cycles.
 * Experience working within multi-supplier or SIAM environments.
 * Ability to interpret and govern SOC and vulnerability management outputs.
 * Knowledge of NIST CSF, NCSC guidance, or UK Government security frameorks.
 * Experience within Defence or other highly regulated environments.
 * Exposure to ISMS, audit, assurance, and ITIL practices.

## Description

Cyber Security Consultant - Incident and Vulnerability Management

+6 months +

+1 day a week on site in London/Preston/Birmingham - 4 days WFH

+Inside IR35

+£550 - £580 a day

+SC cleared role - must have current active clearance

+Sole British nationals only due to nature of the project

Role Description:

Security Incident & Vulnerability Management Consultant
(Operational Integrator/SIAM - Transition Role)

UK Sole National ONLY
Security Clearance required

Role Summary
The Security Incident & Vulnerability Management Consultant operates within the Operational Integrator (OI) function to support the transition to a multi-supplier (SIAM) model within a Defence environment.
The role focuses on understanding, aligning and governing existing high-severity security incident management (S3/S4) and vulnerability management processes across suppliers. Ensuring a consistent, risk-based approach in line with client policy and regulatory requirements, supported by appropriate evidence.
The outcome is a coherent, evidence-driven view of security risk, covering both active incidents and underlying vulnerabilities, with processes standardised and ready for BAU handover.
This is a governance and coordination role, not a hands-on SOC, incident response, or vulnerability remediation function.Key Responsibilities

 * Align and standardise supplier processes for high-severity incidents (S3/S4) and vulnerability management.
 * Establish governance for incident severity, escalation, vulnerability prioritisation (CVSS, KEV, EPSS), and risk acceptance.
 * Coordinate multiple suppliers to ensure consistent delivery and compliance.
 * Govern major incident life cycle activities, including escalation, communication, reporting, and assurance.
 * Oversee vulnerability management from identification through remediation and closure.
 * Define audit-ready evidence requirements and ensure alignment with ISMS and control frameworks.
 * Deliver governance reporting and support transition to BAU operations.

Essential Skills & Experience

 * Experience in Cyber Security Governance, Incident Management, or Vulnerability Management.
 * Strong understanding of incident response and vulnerability management life cycles.
 * Experience working within multi-supplier or SIAM environments.
 * Ability to interpret and govern SOC and vulnerability management outputs.
 * Knowledge of NIST CSF, NCSC guidance, or UK Government security frameorks.
 * Experience within Defence or other highly regulated environments.
 * Exposure to ISMS, audit, assurance, and ITIL practices.


## Related Videos

- [WeAreDevelopers LIVE - CSS is DOOMed](https://www.wearedevelopers.com/videos/1838-wearedevelopers-live-css-is-doomed)
- [What is the real price of one successful line of code?](https://www.wearedevelopers.com/videos/1921-what-is-the-real-price-of-one-successful-line-of-code)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)