Security Consultant - H&PS

: You'll work on innovative projects with colleagues to drive collaboration from strategy through to implementation. You will be using the latest technologies with clients to help them get to the next level. Do you want to work in an environment where you will be part of a thriving team working on the most complex security challenges in the UK health, public sector, Defence and Central Government.

You'll learn, grow and advance in an innovative culture that thrives on shared success, diverse ways of thinking and enables boundaryless opportunities that can drive your career in new and exciting ways. If you’re looking for a challenging career working in a vibrant environment with access to training and a global network of experts, this could be the role for you. As part of our global team, you'll be working with cutting-edge technologies and will have the opportunity to develop a wide range of new skills on the job.

Responsibilities:

• Reduce cyber risk within technology projects by ensuring appropriate security requirements, controls, monitoring, and assurance activities are identified, specified, and evidenced throughout the project lifecycle.
• Conduct threat modelling activities, including alignment with frameworks such as MITRE ATT&CK, to identify credible threats and define proportionate security controls.
• Define monitoring and logging requirements to detect control failures, security incidents, or compromises in live operational environments.
• Support procurement activities by developing security requirements and contractual security schedules.
• Maintain traceability and evidence linking security obligations, threats, requirements, controls, testing outcomes, risks, and decision-making.
• Provide assurance evidence to support risk owners' go-live and in-service risk decisions.
• Interpret relevant laws, policies, standards, and regulatory requirements and translate them into practical security requirements for project teams.
• Support compliance and governance activities by ensuring security requirements are understood, implemented, and evidenced throughout delivery.
• Work collaboratively with project teams to embed security controls and risk management practices into technology solutions from design through to operation.

• Strong technical knowledge in at least one of the following areas:
• Public cloud
• Application security
• Networking
• On-premises infrastructure

• Understanding of threat modelling, security controls, and risk analysis principles.

• Ability to assess risks and recommend proportionate security controls and monitoring measures, rather than relying solely on templates or standard security checklists.

• Experience working across cloud, hybrid, third-party, and non-standard technology environments.

• Familiarity with at least one recognised security framework

• Ability to validate security assumptions through evidence-based activities, including:
• Security testing
• Configuration reviews
• Technical investigations

• Strong analytical and problem-solving skills, with the ability to make informed security recommendations based on technical evidence.

• Ability to translate technical security concepts into practical guidance for delivery teams and stakeholders.

• Comfortable working within varying levels of service complexity and autonomy, aligned to SFIA levels 3–5.