Full job descriptionRole OverviewWe are seeking a senior Cyber Security Specialist / Security Connector to provide security expertise across enterprise technologies, cloud platforms, modern applications and emerging AI solutions.
The role will act as a security connector between business, architecture, engineering and cyber teams, enabling secure-by-design delivery while balancing security risk, resilience and regulatory requirements.
Key Responsibilities*Lead security assessments across cloud, application, infrastructure, data and AI-enabled solutions.
*Provide pragmatic security recommendations and implementable controls.
*Perform threat modelling using STRIDE, MITRE ATT&CK or equivalent methodologies.
*Review RESTful APIs, containerised microservices, identity patterns and third-party integrations.
*Advise architecture and engineering teams on secure-by-design principles.
*Assess security posture across endpoints, networks, cryptography, IAM and hybrid cloud environments.
*Support vulnerability remediation, security governance and risk acceptance activities.
*Support security incident investigation where required.
*Apply relevant security standards and frameworks including ISO 27000, PCI DSS, COBIT, NIST and OWASP.
*Communicate complex security risks, options and recommendations to technical and senior business stakeholders.
*Collaborate across UK and offshore multidisciplinary teams.
*Promote secure, ethical and compliant engineering practices.
Required SkillsMandatory*8+ years of relevant professional cyber security experience.
*Broad enterprise cyber security knowledge.
*Strong experience across cloud, AI, endpoint, network, cryptography and IAM security.
*Hands-on experience with public and/or private cloud environments.
*Strong understanding of modern architectures.
*Experience with REST APIs, containers and microservices.
*Practical threat modelling experience.
*Practical security risk assessment experience.
*Strong understanding of security controls and secure engineering practices.
*Experience applying security frameworks and standards.
*Strong stakeholder management and consulting skills.
*Excellent written and verbal communication skills.
*Ability to work across technical and non-technical stakeholder groups.
Desirable*AI/ML security experience.
*Security architecture experience.
*Experience working with emerging AI solutions.
*Experience in regulated or highly controlled enterprise environments.
*Experience leading or coordinating security teams.
CertificationsMandatory / Equivalent Professional Certification:
*CISSP, CISM or CCSP, or equivalent security management certification.
*CEH, OSCP or equivalent technical security certification.
Desirable:
*Cloud security certification.
*Cyber security architecture certification.