TL;DR

Senior Security Consultant (Cybersecurity): Leading improvements to the Secure Software Development Lifecycle within a complex, large-scale environment with an accent on embedding security across delivery lifecycles and validating security controls. Focus on strengthening application, platform, cloud, and infrastructure security, and acting as a trusted internal security advisor.

Location: Remote from the UK

Company

%hirify_global% is a recruitment agency specializing in IT contract and permanent roles.

What you will do

Lead improvements to the Secure Software Development Lifecycle (SDLC) aligned to NIST CSF 2.0.
Act as an Application Security / Project Guardian, embedding security across delivery lifecycles.
Review and tighten existing vulnerability management practices.
Define and document end-to-end security requirements for delivery teams.
Ensure security controls are applied effectively at all project stages.
Integrate application, platform, cloud, and infrastructure security for cohesive SDLC controls.

Requirements

Proven experience improving Secure SDLC maturity within complex environments.
Strong knowledge of NIST CSF, application security, and secure-by-design principles.
Experience working with ISMS environments.
Hands-on capability across vulnerability management, security assessments, and control validation.
Ability to translate security requirements into practical, delivery-ready guidance.
Strong understanding of cloud and platform security (AWS, Kubernetes, APIs, IAM).

Culture & Benefits

Opportunity to play a key part in strengthening an established Secure SDLC.
Work across application security and project delivery.
Influence how security is embedded throughout the lifecycle.
Be part of an equal opportunities employer.