Security Consultant

Overview

In this Security Consultant role at Version 1, you will combine hands-on delivery with client-facing advisory to strengthen security across cloud, applications and infrastructure. You will assess maturity, design controls, and lead security reviews to deliver pragmatic, risk-based improvements. You’ll challenge assumptions and guide stakeholders toward secure outcomes while embedding security into delivery pipelines. This opportunity offers impact at scale within a value-driven, partner-oriented tech environment.

Pay / Benefits

• Quarterly performance-related profit share
• Flexible/remote working
• Pension
• Private healthcare
• Life assurance
• Educational assistance and certifications

Responsibilities

• Assess current-state security maturity, identify gaps, and map remediation roadmaps
• Lead security architecture reviews across cloud, applications, IAM, data protection and detection/response
• Provide expert consulting on security strategy, risk reduction, and operating model improvements
• Challenge weak assumptions with evidence-based recommendations to diverse stakeholders
• Design and review secure cloud landing zones, network segmentation, identity models, logging/monitoring patterns, guardrails
• Partner with engineering, platform, DevOps and operations to embed security into delivery pipelines and IaC
• Support threat detection, incident response readiness, use-case tuning and post-incident improvement
• Contribute to security standards, policies, patterns, accelerators and client deliverables such as assessments and executive summaries

Key requirements

• Cloud Security (preferably AWS) – hands-on with core services, networking, identity, logging, encryption and monitoring
• Application/API Security – secure design principles, vulnerabilities, auth models, secrets management, secure SDLC
• SIEM – log onboarding, correlation, alert triage, dashboards, use-case tuning
• Organisation/General Security – policy, governance, risk, compliance, awareness, third-party risk
• Identity & Access Management (IAM) – RBAC, MFA, federation/SSO, access governance
• Data Protection – encryption, key management, data lifecycle, data in transit/rest/in use
• Infrastructure Security – OS, VMs, containers/Kubernetes, network hardening, vulnerability management
• Threat Detection & Incident Response – detection engineering, incident triage, response playbooks
• Infrastructure as Code (IaC) – security checks in pipelines, guardrails for provisioning
• Strong Consulting Skills – stakeholder management, credible recommendations, executive-facing communication

• Stakeholder management
• Clear communication with both technical and non-technical audiences
• Confidence in challenging customer assumptions
• Cloud security architecture and control design
• Security assessments, gap analysis and remediation planning
• Security architecture documentation and reporting

…