Security Consultant

Salary: £49,000 - 66,000 per year

Requirements:

• We need hands-on experience securing cloud environments, preferably AWS, including core services, networking, identity, logging, encryption, and security monitoring.
• We need experience reviewing or implementing secure cloud architectures, landing zones, account/project structures, and preventative/detective controls.
• We need knowledge of cloud-native security services and best practices for workload, storage, network, and platform protection.
• We need experience identifying and mitigating application and API security risks across the software delivery lifecycle.
• We need understanding of secure design principles, common web/API vulnerabilities, authentication/authorization models, secrets management, and secure SDLC practices.
• We need experience with SIEM platforms for log onboarding, correlation rule creation, alert triage, dashboarding, and use-case tuning.
• We need a broad understanding of enterprise security domains including policy, governance, risk, compliance, awareness, third-party risk, and operational security.
• We need hands-on experience with identity and access management principles including RBAC, least privilege, privileged access, federation/SSO, MFA, and access governance.
• We need experience implementing or advising on data classification, encryption, key management, secrets handling, tokenisation/masking, backup security, and data lifecycle protection.
• We need experience securing operating systems, virtual machines, containers/Kubernetes, networks, and platform services using hardening, segmentation, vulnerability management, and secure configuration practices.
• We need experience in threat detection engineering, incident triage, investigation support, response coordination, and lessons-learned improvement activities.
• We need hands-on experience with infrastructure as code and automation, including reviewing templates/modules for security risks and embedding policy/compliance checks into delivery pipelines.
• We need strong consulting and stakeholder management skills, with the confidence to challenge customer assumptions and lead difficult security conversations when needed.
• We need strong written and verbal communication skills, including workshops, assessments, reports, and executive-level briefings.
• Experience working in consulting, professional services, or customer-facing transformation programmes is preferred.
• Relevant certifications in cloud, security, architecture, or incident response are advantageous.
• Exposure to regulated environments and security frameworks is beneficial.
• Experience with DevSecOps, CI/CD security integration, and security automation is desirable.

Responsibilities:

• We assess current-state security maturity, identify control gaps, and define pragmatic remediation roadmaps aligned to business priorities.
• We lead and support security architecture reviews across cloud, applications, infrastructure, IAM, data protection, and detection/response domains.
• We provide expert consulting to customers on security strategy, risk reduction, control design, and security operating model improvements.
• We challenge weak security assumptions with confidence, using evidence-based recommendations and clear communication with technical and non-technical stakeholders.
• We design and review secure cloud landing zones, network segmentation, identity models, logging/monitoring patterns, and guardrails.
• We partner with engineering, platform, DevOps, and operations teams to embed security into delivery pipelines and infrastructure as code practices.
• We support threat detection, incident response readiness, use-case tuning, and post-incident improvement activities.
• We contribute to security standards, policies, patterns, reusable accelerators, and client-facing deliverables including assessments, risk registers, and executive summaries.

Technologies:

• API
• AWS
• CI/CD
• Cloud
• DevSecOps
• DevOps
• IAM
• Support
• Kubernetes
• Network
• Oracle
• OutSystems
• RBAC
• Security
• Snowflake
• Web
• Embedded
• REST

More:

We are Version 1, a 30-year-established technology and transformation partner trusted by global brands. We work closely with leading technology companies including Microsoft, AWS, Oracle, Red Hat, OutSystems, and Snowflake, and we are proud to be a values-driven, award-winning employer with more than 3,300 people across the UK and Ireland. We offer flexible and remote working, strong career progression and mentorship, financial and wellbeing support, generous holiday and family leave, and educational assistance with incentivised certifications. We are committed to diversity, inclusion, and belonging, and we want every candidate to have a positive and accessible recruitment experience.

last updated 34 week of 2026