Cyber Security Consultant

Job Description: The Cybersecurity Consultant will be responsible for strengthening the organisation’s cybersecurity posture across cloud and on-premises infrastructure, identity and access management, network security, application/API security, cryptography, secrets management, vulnerability management, and DevSecOps. The role will collaborate with Infrastructure, Cloud, Network, DevOps, and IT teams to identify security weaknesses, implement controls, improve configurations, and coordinate remediation activities. Key Responsibilities: • Security Engineering: Implement, configure, and improve cybersecurity controls across cloud and on-premises environments. • Identity Security: Support Microsoft Entra ID and Active Directory, including MFA, Conditional Access, privileged access management, and access reviews. • Cloud Security: Assess and harden Microsoft Azure and GCP environments, covering identity, network security, logging, encryption, and secure configurations. • Network Security: Support network segmentation, access controls, VPNs, and firewall security, including FortiGate. • Vulnerability Management: Perform vulnerability scans, analyse findings, prioritise risks, coordinate remediation, and validate fixes. • Cryptography and Secrets Management: Support cryptographic keys, certificates, encryption, secrets, and credentials using HashiCorp Vault, Azure Key Vault, GCP Secret Manager, or equivalent solutions. • API Security: Assess API security controls, including authentication, authorisation, encryption, access controls, API gateways, and common vulnerabilities. • DevSecOps: Integrate security into CI/CD pipelines through SAST, dependency scanning, secrets detection, container security, and IaC security. • Terraform and IaC Security: Review Terraform configurations and improve security controls across Infrastructure as Code environments. • Incident Response: Support security investigations, incident response, remediation, and lessons learned. • Security Policies and Standards: Contribute to cybersecurity policies, technical standards, hardening baselines, and security procedures. • Security Assessments: Provide cybersecurity input for technology projects, architecture reviews, risk assessments, and audits. • Automation and Continuous Improvement: Identify automation opportunities and implement security improvements to strengthen the organisation’s security posture. Required Skills: Experience or exposure to the following technologies and domains: • Microsoft Entra ID and Active Directory • Microsoft Azure and Google Cloud Platform (GCP) • HashiCorp Vault, Azure Key Vault, and GCP Secret Manager • Cryptography, PKI, certificates, encryption, and key management • API security and API gateways • Windows/Linux infrastructure and network segmentation • FortiGate or equivalent enterprise firewalls • Vulnerability scanning and management tools • Terraform and Infrastructure as Code (IaC) • DevSecOps and CI/CD security • Security monitoring and incident response • Python, PowerShell, Bash, or similar scripting languages Qualifications and Experience: • Bachelor’s degree in Cybersecurity, IT, Computer Science, or a related field, or equivalent practical experience. • 2–4 years of experience in cybersecurity, security engineering, cloud security, infrastructure security, or related technical roles. • Practical understanding of cybersecurity, networking, identity, cloud, infrastructure, cryptography, secrets management, and API security. • Hands-on experience with several relevant technologies and willingness to develop expertise across the wider security environment. • Strong analytical, problem-solving, troubleshooting, and communication skills. • Strong written and verbal English communication skills. Desirable Certifications: • CompTIA Security+ or CySA+ • Microsoft or Google Cloud security certifications • Fortinet certifications • HashiCorp or Terraform certifications • CCSP or CISSP • GIAC certifications Show more Show less

Security Engineering: Implement, configure, and improve cybersecurity controls across cloud and on-premises environments. Identity Security: Support Microsoft Entra ID and Active Directory, including MFA, Conditional Access, privileged access management, and access reviews. Cloud Security: Assess and harden Microsoft Azure and GCP environments, covering identity, network security, logging, encryption, and secure configurations. Network Security: Support network segmentation, access controls, VPNs, and firewall security, including FortiGate. Vulnerability Management: Perform vulnerability scans, analyse findings, prioritise risks, coordinate remediation, and validate fixes. Cryptography and Secrets Management: Support cryptographic keys, certificates, encryption, secrets, and credentials using HashiCorp Vault, Azure Key Vault, GCP Secret Manager, or equivalent solutions. API Security: Assess API security controls, including authentication, authorisation, encryption, access controls, API gateways, and common vulnerabilities. DevSecOps: Integrate security into CI/CD pipelines through SAST, dependency scanning, secrets detection, container security, and IaC security. Terraform and IaC Security: Review Terraform configurations and improve security controls across Infrastructure as Code environments. Incident Response: Support security investigations, incident response, remediation, and lessons learned. Security Policies and Standards: Contribute to cybersecurity policies, technical standards, hardening baselines, and security procedures. Security Assessments: Provide cybersecurity input for technology projects, architecture reviews, risk assessments, and audits. Automation and Continuous Improvement: Identify automation opportunities and implement security improvements to strengthen the organisation’s security posture.