Cyber Security Consultant

The Cybersecurity Consultant will be responsible for strengthening the organisation’s cybersecurity posture across cloud and on-premises infrastructure, identity and access management, network security, application/API security, cryptography, secrets management, vulnerability management, and Dev Sec Ops . The role will collaborate with Infrastructure, Cloud, Network, Dev Ops, and IT teams to identify security weaknesses, implement controls, improve configurations, and coordinate remediation activities.

• Security Engineering: Implement, configure, and improve cybersecurity controls across cloud and on-premises environments.
• Identity Security: Support Microsoft Entra  Active Directory, including MFA, Conditional Access, privileged access management, and access reviews.
• Cloud Security: Assess and harden Microsoft Azure and GCP environments, covering identity, network security, logging, encryption, and secure configurations.
• Network Security: Support network segmentation, access controls, VPNs, and firewall security, including Forti Gate.
• Vulnerability Management: Perform vulnerability scans, analyse findings, prioritise risks, coordinate remediation, and validate fixes.
• Cryptography and Secrets Management: Support cryptographic keys, certificates, encryption, secrets, and credentials using Hashi Corp Vault, Azure Key Vault, GCP Secret Manager, or equivalent solutions.
• API Security: Assess API security controls, including authentication, authorisation, encryption, access controls, API gateways, and common vulnerabilities.
• Dev Sec Ops : Integrate security into CI/CD pipelines through SAST, dependency scanning, secrets detection, container security, and IaC security.
• Terraform and IaC Security: Review Terraform configurations and improve security controls across Infrastructure as Code environments.
• Incident Response: Support security investigations, incident response, remediation, and lessons learned.
• Security Policies and Standards: Contribute to cybersecurity policies, technical standards, hardening baselines, and security procedures.
• Security Assessments: Provide cybersecurity input for technology projects, architecture reviews, risk assessments, and audits.
• Automation and Continuous Improvement: Identify automation opportunities and implement security improvements to strengthen the organisation’s security posture.

Experience or exposure to the following technologies and domains:

• Microsoft Entra  Active Directory
• Microsoft Azure and Google Cloud Platform (GCP)
• Hashi Corp Vault, Azure Key Vault, and GCP Secret Manager
• Cryptography, PKI, certificates, encryption, and key management
• API security and API gateways
• Windows/Linux infrastructure and network segmentation
• Forti Gate or equivalent enterprise firewalls
• Vulnerability scanning and management tools
• Terraform and Infrastructure as Code (IaC)
• Dev Sec Ops  and CI/CD security
• Security monitoring and incident response
• Python, Power Shell, Bash, or similar scripting languages

• Bachelor’s degree in Cybersecurity, IT, Computer Science, or a related field, or equivalent practical experience.
• 2–4 years of experience in cybersecurity, security engineering, cloud security, infrastructure security, or related technical roles.
• Practical understanding of cybersecurity, networking, identity, cloud, infrastructure, cryptography, secrets management, and API security.
• Hands-on experience with several relevant technologies and willingness to develop expertise across the wider security environment.
• Strong analytical, problem-solving, troubleshooting, and communication skills.
• Strong written and verbal English communication skills.

• CompTIA Security+ or CySA+
• Microsoft or Google Cloud security certifications
• Fortinet certifications
• Hashi Corp or Terraform certifications
• CCSP or CISSP
• GIAC certifications