Security Design Consultant (Cybersecurity)

TL;DR

Security Design Consultant (Cybersecurity): Develop and design secure solutions across computing platforms with an accent on threat modeling, vulnerability mitigation, and security controls documentation. Focus on deconstructing architectures, assessing risks using industry standards like STRIDE and MITRE, and communicating designs to stakeholders.

Location: Hybrid - Edinburgh, Leeds, Halifax, Manchester or Bristol (at least 2 days per week or 40% time in office)

Salary: £72,702 - £80,780

Company

Major UK bank investing billions in people, data, and tech to serve 26 million customers and build the bank of the future.

What you will do

• Develop and design secure solutions, producing comprehensive Security Design documents outlining controls.
• Deconstruct solution and network architectures to identify threats and vulnerabilities.
• Mitigate risks using standards like STRIDE and MITRE, evaluating solution soundness.
• Interpret threats into business risks, assessing likelihood and impact.
• Communicate technical security concepts and designs to technical and non-technical stakeholders.
• Weigh risks and benefits of competing security design options across multiple projects.

Requirements

• Ability to develop secure solutions and document security controls.
• Skill in deconstructing architectures and mitigating threats/vulnerabilities.
• Experience interpreting threats as risks and evaluating impacts.
• Strong communication of technical concepts to diverse audiences.
• Comfortable managing multiple challenging projects simultaneously.

Nice to have

• Awareness of standards like ISO 27000, PCI DSS, COBIT, NIST, OWASP.
• Certifications: CISSP, CISM, CCSP, CEH, OSCP or equivalent.
• Experience in public or private cloud environments.

Culture & Benefits

• Hybrid working with job share options.
• Generous pension up to 15%, performance bonus, share schemes.
• Adaptable benefits like discounted shopping, generous holiday allowance plus bank holidays.
• Wellbeing initiatives, parental leave, menopause health package, Working with Cancer support.
• Inclusive environment celebrating diversity, disability confident with reasonable adjustments.