Internal Technical Security Consultant

KPMG
Reading
4 months ago
Applications closed

Related Jobs

View all jobs

Senior Cyber Security Consultant

Security Consultant

Senior Security Consultant (OT)

Senior Security Consultant (OT)

Senior Security Consultant (OT)

Senior Security Consultant (OT)

Job description

Job Title: Technical Security Consultant

Grade:Manager (Grade C)
Location:All
Department:Security, EWT Function

Team

Security Architecture and Advisory (SAA) is part of KPMG UK Cyber Security, a first line of defence team within the Enterprise-Wide Technology function. The SAA team are critical in the assessment, development, and delivery of innovative, secure digital solutions for KPMG, our clients, and audited entities. The SAA team is vital to KPMG’s ability to demonstrate that we are delivering ‘secure by design’ digital solutions so that our business stakeholders, our customers, and our regulators trust KPMG.

 

Role

This role is within the Security Architecture Consultancy sub-team who provide specialist security advice collaborating with technical and business teams throughout the entire or part of a digital solution’s life cycle. The team owns and develops Security Patterns, Security Specifications, and the Threat Modelling Framework, to support secure technology innovation in a changing threat landscape. The purpose of this role is to advise on the technical security aspects of business products that are considered, evaluated, developed and implemented by technology teams across KPMG UK.

 

The Technical Security Consultant will:

Lead as an internal consultant to an assigned Platform/Capability as part of our Centre of Excellence function providing technical security direction. Collaborate with programmes and projects to help deliver solutions that meet the business need, including any client contractual security requirements, and are compliant with the Enterprise Security Architecture principles – ensuring all applicable controls and patterns are implemented. Work alongside internal Design Authorities and Change Management functions to ensure all change initiatives are reviewed, supported, and aligned with Enterprise Security Architecture. Using threat modelling to provide risk or threat-based advice to programme stakeholders along with actionable recommendations where necessary. Manage the scoping of security testing requirements for new systems and products working closely with our Security Testing function. Provide support for risk assessment, security remediation, investigations, and vulnerability management as part of the wider Information Security team. Support the creation and review of design and guidance documentation where required. Support Enterprise Security Architecture by providing feedback from projects, including developing patterns and specifications in collaboration with Engineering teams. Work towards and achieve or extend professional certifications as part of personal development (e.g. security or Cloud Vendor certifications). Share experiences with others to assist their learning and understanding.

 

Prior experience

You must:

Have worked in at least one of:Infrastructure/Solution ArchitectTechnical Security Architect/ConsultantSecurity Operations Secure application development Hands on experience and knowledge in securing digital products/solutions in the Cloud (e.g. AWS, Azure, and Google). Good understanding of Cloud, Application and SaaS security concepts, best practices, and industry standards. Good experience of working in an Agile software development environment. Be able to demonstrate the ability to adapt communication style to explain technical concepts to different people within an organisation whether advising stakeholders, directing teams, or sharing experience. Experience of successfully working in a fast paced, customer service/regulated environments, delivering high quality information security services. Be calm in challenging situations, able to navigate through complex security problems to find the root cause and a balanced outcome.

 

It would be advantageous if you can demonstrate some, or all of:

Experience and knowledge of threat modelling, container/serverless platforms, modern application development processes, infrastructure/network security; security testing, and security tooling (e.g. SIEM, End Point Protection) Experience in securely configuring and managing any of SAP/Service Now/ Microsoft Dynamics/Sales Force. Any security certification (e.g. CISSP, CCSP, Microsoft).

 

 

Get the latest insights and jobs direct. Sign up for our newsletter.

By subscribing you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Cyber Security Jobs at Newly Funded UK Start-ups: Q3 2025 Investment Tracker

Cyber security is no longer just a topic for tech-savvy professionals—it’s an essential pillar of every modern organisation. From protecting sensitive customer data to thwarting state-sponsored attacks, cyber security teams play a crucial role in safeguarding digital infrastructures across all sectors. In the UK, cyber security innovation is thriving, fuelled by a fertile mix of venture capital, government backing, and an ever-growing pool of talented specialists. Now, in the third quarter of 2025, we’ve seen a fresh influx of funding for cyber security start-ups that are poised to shape the industry’s future. This Q3 2025 Investment Tracker highlights newly funded UK-based cyber security start-ups, their core offerings, and—most importantly—the wide range of job opportunities they’re creating. Whether you’re a veteran security analyst, a pen tester, or a newcomer eager to explore the defensive side of tech, these start-ups are actively seeking professionals to help drive their next phase of growth. We’ll also guide you through the essential skills in demand, strategies to secure a role, and how to leverage CyberSecurityJobs.tech to fast-track your job search.

Portfolio Projects That Get You Hired for Cyber Security Jobs (With Real GitHub Examples)

With rising cyber threats and increasingly sophisticated attacks, cyber security has become a critical priority for organisations worldwide. From penetration testers (pentesters) and SOC analysts to cloud security engineers and threat intelligence specialists, the demand for skilled cyber security professionals continues to surge. But how do you stand out in a growing field? Alongside your CV, an impressive cyber security portfolio can be the distinguishing factor that convinces employers you’re the right fit. In this comprehensive guide, you’ll discover: Why a cyber security portfolio is essential for job seekers in this domain. How to align portfolio projects with different cyber security career paths. Real GitHub examples that demonstrate best practices in security-focused projects. Actionable project ideas you can start today, from penetration testing labs to blue-team detection pipelines. Best practices for organising your repos and presenting your work so hiring managers can instantly see your impact. When you’re ready to pursue your next opportunity, remember to upload your CV on CyberSecurityJobs.tech. Our specialised platform connects talented security professionals with employers who need your expertise—exactly what your portfolio will showcase.

Cyber Security Job Interview Warm‑Up: 30 Real Coding & System‑Design Questions

The need for skilled cyber security professionals has never been greater. As organisations rapidly digitise their operations and store increasing amounts of sensitive data online, cyber threats loom large—ranging from sophisticated ransomware attacks to insider threats and state‑sponsored espionage. Against this backdrop, cyber security jobs remain some of the most in‑demand and mission‑critical roles on the market. If you’re preparing for a cyber security interview, expect to be tested on a broad spectrum of topics—from secure coding and incident response to network security architecture and compliance standards. In many cases, companies also include problem‑solving exercises and system design scenarios to gauge how well you can apply theoretical knowledge to real‑world threats. To help you ace these assessments, we’ve compiled 30 real coding & system‑design questions you might encounter. Each reflects a key area of cyber security—whether it’s encryption and key management, threat modelling, or designing a zero‑trust network. Along the way, we’ll offer insights and best practices so you can stand out from the crowd. If you’re on the lookout for exciting cyber security roles in the UK, head to www.cybersecurityjobs.tech. There, you’ll discover a range of positions—covering everything from penetration testing and threat intelligence to compliance management and security operations. Let’s dive into the essentials of interview readiness.