Principal Security Consultant (Cybersecurity)

Location: Home based across the UK, with hybrid work involving occasional office attendance in Birmingham and work on client sites. Applicants must be resident in the UK and able to travel to UK customer locations when requested and non-UK customer locations when mutually agreed.

Company

hirify.global is a global assurance and risk management partner providing certification, cybersecurity, inspection, training, and related services across more than 50 countries.

What you will do

• Lead and coordinate technical responses to cyber incidents for hirify.global and professional service and Defensive Security Service customers.
• Lead responders and conduct autonomous investigations of sophisticated incidents using mitigation, preparedness, response, and recovery approaches.
• Develop and monitor incident response strategy, policies, procedures, and technical capabilities with DSS leadership.
• Investigate security events across Windows, Linux, cloud, and hybrid environments, including digital imaging, forensics, and suspicious artefact triage.
• Design and deliver customer training and provide written and verbal reports to internal and external stakeholders.
• Research threat actors, TTPs, vulnerabilities, attacks, and industry developments aligned with MITRE ATT&CK, and improve detection and response capability.

Requirements

• Strong incident management and analytical skills, understanding of threat actor TTPs, and commercial awareness.
• Strong written and spoken English skills.
• At least 36 months of relevant IT security industry experience within the past 4 years.
• Ability to work independently on projects and collaboratively within a team.
• Ability to lead, teach, present to, and inspire customers and the wider team.
• Ability to travel to UK customer locations when requested and non-UK customer locations when mutually agreed.
• Ability to participate in a 24/7 on-call rota.
• Willingness to maintain a relevant industry certification, preferably CREST CCIM and at least one other CREST Certified Incident Response certification.

Nice to have

• CREST CCIM or CRIA certification.
• GIAC GCFA, GCIH, or GNFA certification.
• UKSC Chartered or Principal Professional in Incident Response status.
• Similar professional certification.

Culture & Benefits

• Collaborative cyber unit spanning SOC analysis, incident response, penetration testing, red teaming, threat intelligence, research and development, detection and response, and governance, risk, and compliance.
• Opportunities for professional development, continuous learning, and varied career progression.
• Flexible working arrangements where applicable.
• Competitive market-aligned salary and comprehensive benefits package.
• Pre-employment checks may include identity, right to work, employment history, education, and criminal records verification where permitted by local law.