Cyber Security Specialist (Security Connector)

Key responsibilities

· Lead security assessments and provide pragmatic recommendations for cloud, application, infrastructure, data and AI-enabled solutions.

· Perform threat modelling using STRIDE, MITRE ATT&CK or equivalent methods and translate findings into implementable controls.

· Review RESTful APIs, containerised microservices, identity patterns, and third-party integrations for security risks.

· Advise engineering and architecture teams on secure-by-design principles across the delivery lifecycle.

· Assess security posture across endpoints, networks, cryptography, IAM, and hybrid cloud domains.

· Support vulnerability remediation, security governance, risk acceptance, and incident investigation activities.

· Interpret and apply ISO 27000 series, PCI DSS, COBIT, NIST and OWASP guidance in enterprise environments.

· Communicate complex security risks and options clearly to technical and senior business stakeholders.

Essential experience and skills

· Minimum 8 years of relevant professional experience, including substantial hands-on experience in the core specialisms of this role.

· Broad enterprise cyber security knowledge across cloud, AI, endpoint, network, cryptography and IAM.

· Hands-on experience with public and/or private cloud environments.

· Strong understanding of modern architectures, APIs, containers, and microservices.

· Practical threat modelling and risk assessment experience.

· Knowledge of security control frameworks, standards, and secure engineering practices.

· Strong stakeholder management, consulting, and written communication skills.

Qualifications and certifications

· Bachelor's degree in cyber security, computer science, engineering, data science or related discipline, or equivalent professional experience.

· CISSP, CISM or CCSP, or equivalent security management certification.

· CEH, OSCP or equivalent technical security certification. Cloud security or cyber security architecture certification is desirable.

Core behaviors

· Strong ownership, analytical thinking, and delivery focus.

· Ability to collaborate across UK and offshore, multidisciplinary teams.

· Clear communication with both technical and non-technical stakeholders.

· Commitment to secure, ethical and compliant engineering practices.

· Curiosity and continuous learning in a rapidly evolving threat and technology landscape.