Senior Security Consultant (Delivery & Growth)

The Company

We are experts in Cyber Security, DevOps and Application Security. Our integrated approach keeps you three steps ahead of the competition, securing your systems, accelerating development and driving innovation. We specialise in delivering results for large organisations with complex environments, ensuring you’re always ready for what’s next.

We’re the trusted experts that world-leading enterprises turn to for solutions that don’t just protect, they propel growth.

The Role

This is a client-facing consulting role with a genuine commercial dimension.

You will lead technical security consulting engagements across security architecture, cloud security, DevSecOps, application security and security operations. Working closely with client stakeholders, architects and engineering teams, you will help organisations solve complex security challenges and translate requirements into practical, risk-based solutions.

This is a delivery-first role. You will be expected to lead workshops, shape technical approaches, produce high-quality consulting deliverables and provide trusted advice to clients. Alongside delivery, you will help identify and develop opportunities for follow-on work, contributing to proposals, statements of work and account growth activities.

Successful consultants become trusted advisors to their clients, using delivery excellence and strong stakeholder relationships to identify opportunities for additional client value and account growth.

Key Responsibilities

•Lead security consulting engagements end-to-end, owning scope, delivery quality and client outcomes

•Lead client workshops, discovery sessions and technical discussions to understand challenges and define security requirements

•Diagnose client security problems and develop pragmatic technical solutions across architecture, engineering and operational security domains

•Design security architectures and implement security controls across cloud environments (AWS, Azure or GCP), including identity, logging, detection and security posture management

•Support DevSecOps and application security practices, embedding security controls into CI/CD pipelines and software delivery processes

•Advise on security operations, SIEM architecture, detection engineering, threat detection coverage, incident response and operational maturity

•Deliver security assessments, maturity reviews and gap analyses, producing prioritised, risk-based improvement roadmaps

•Produce high-quality client-facing deliverables, including technical reports, architecture recommendations, standards and improvement plans

•Work closely with client architects, engineering teams and technical leadership to shape solutions and delivery roadmaps

•Identify and qualify follow-on opportunities arising from client engagements, including consulting, retained and managed service engagements.

•Contribute to proposals, statements of work, bid responses and solution documentation

•Build and maintain trusted relationships with senior client stakeholders, working alongside account managers and practice leadership on account growth plans

•Support accurate scoping, effort estimation and commercial risk assessment for new opportunities

Skills

•Recent, hands-on consulting and delivery experience across several of the following areas:

oSecurity Architecture

oCloud Security

oDevSecOps

oApplication Security

oSecurity Operations

oDetection Engineering

•Proven ability to lead client engagements from discovery through to delivery

•Experience leading technical workshops and translating client requirements into practical security architectures, roadmaps and delivery plans

•Ability to work effectively with architects, engineering teams and technical stakeholders to design and implement security solutions

•Strong working knowledge of AWS, Azure or GCP, including cloud IAM, logging, monitoring and cloud security posture management

•Practical experience with DevSecOps and application security practices, including SAST, DAST, secrets management, container security and policy-as-code approaches

•Working understanding of SIEM technologies, detection engineering and incident response practices

•Experience conducting maturity assessments, gap analyses and security reviews

•Experience contributing to proposals, statements of work and technical solution design

•Confident client-facing presence with senior and budget-holding stakeholders, with the ability to build trusted advisor relationships

•Strong commercial judgement around scoping, effort estimation and balancing delivery commitments with account growth activity

Preferred

•Previous experience in a security consultancy or professional services environment

•Experience contributing to account growth alongside client delivery responsibilities

•Experience with Infrastructure as Code technologies including Terraform, Kubernetes, Helm and policy-as-code tooling

•Experience across Microsoft, AWS and/or Google security ecosystems

•Exposure to managed detection and response, SOC services or managed security offerings

•Exposure to regulatory and compliance-driven engagements, including NIST CSF, CIS Controls, ISO 27001, Cyber Essentials or SOC 2

•Relevant certifications such as CISSP, CISM, CCSP, AWS/Azure/GCP Security certifications or equivalent