Security Consultant (Cloud Security/AI)

Location: London, England, United Kingdom; hybrid with office attendance of approximately 2 days per quarter and quarterly company-wide collaboration days in London.

Company

hirify.global develops a cloud-native core banking platform for global banks and financial institutions.

What you will do

• Partner with engineering and product teams to deliver secure, scalable cloud-native banking solutions.
• Lead threat modelling workshops for products, services, AI tooling, and architectural changes.
• Review solution designs, assess risks across cloud-native and distributed systems, and provide actionable security recommendations.
• Shape the secure design of APIs, microservices, data flows, and cloud infrastructure.
• Define security requirements, compensating controls, standards, patterns, and reference architectures.
• Communicate technical risks, support remediation, and help teams adopt practical security controls for agentic AI.

Requirements

• Significant experience in a Security Consultant, Security Architect, or similar senior security role.
• Proven experience conducting security design reviews and threat modelling.
• Strong understanding of AWS security architecture and cloud security best practices.
• Experience securing Java-based microservices and distributed systems.
• Knowledge of modern authentication and authorisation patterns, including OAuth2, OIDC, and JWT.
• Experience assessing API security risks and controls.
• Strong stakeholder management, communication, influencing, and constructive challenge skills.
• Ability to work independently, operate effectively in fast-moving engineering environments, work with ambiguity, and balance risk reduction with business outcomes.
• Pragmatic, delivery-focused approach focused on enabling secure products rather than only enforcing compliance.

Nice to have

• Experience in financial services, fintech, or regulated environments.
• Familiarity with Docker, Kubernetes, ECS, or EKS.
• Experience with CI/CD security, DevSecOps practices, and automated security controls.
• Knowledge of secure software development practices and application security testing.
• Certifications such as CISSP, CCSP, AWS Security Specialty, or equivalent.

Culture & Benefits

• 25 days of holiday plus Bank/Public Holidays, with options to swap some public holidays for alternative dates.
• Birthday day off, four wellbeing days, enhanced parental policies, enhanced sick pay, and sabbatical leave.
• Remote-enabled agile working with flexible core hours and the option to work from anywhere outside the typical working location for up to four weeks per year.
• Private health insurance, pension scheme, life assurance, income protection, flexible benefits via salary sacrifice, and an options pool.
• Career progression and learning pathways, regular social gatherings, affinity groups, employee networks, Headspace subscription, and one paid volunteering day annually.

Hiring process

• Assessment covers technical capabilities and what the candidate can bring to the teams.
• Assessment considers Business Impact, Change Driver, and Delivery Excellence.
• Interview accommodations are available on request.