Senior Security Consultant

Are you a security engineer who loves working with clients as much as you love the technical craft? We're growing our security practice at RiverSafe and looking for a Senior Security Consultant to join us in a hands-on, client-facing role. The Role: This isn't a back-office position. You'll sit at the intersection of security consulting, cloud engineering, and DevSecOps - delivering real technical outcomes for clients while also shaping proposals, driving presales, and growing accounts. What you'll be doing:

• Delivering security assessments, gap analyses, and maturity reviews across cloud and platform environments
• Designing and implementing security controls across AWS, Azure, and GCP
• Embedding security into CI/CD pipelines and championing DevSecOps practices
• Leading client workshops and presenting findings to technical and executive audiences
• Supporting the full presales cycle - from qualification through to proposal and award
• Contributing to detection engineering, SIEM strategy, and SOC governance What you'll bring:
• Strong cloud security experience across AWS, Azure, and/or GCP
• Hands-on with Terraform, Kubernetes, and IaC security
• DevSecOps mindset - CI/CD, SAST/DAST, shift-left security
• Identity & access security - Zero Trust, RBAC, MFA, SSO
• Client-facing confidence - you can present to a CISO as comfortably as a developer
• Familiarity with NIST CSF, CIS Controls, or ISO 27001 Relevant certifications (CISSP, CISM, AWS/Azure security, CKS) are a bonus, but breadth across domains matters more than any single credential. London / Hybrid: 2-3 days per week in the office / client site is required.