Cyber Security Specialist

Position Overview: Title – Cyber Security Specialist (Security Connector) Location: London, Manchester, Halifax (Hybrid - 2 days in a week) Role purpose Provide senior cyber security expertise across enterprise technologies, cloud platforms, modern applications, and emerging AI solutions. Act as a security connector between business, architecture, engineering and cyber teams, enabling secure-by-design delivery while balancing risk, resilience and regulatory expectations. Key responsibilities

• Lead security assessments and provide pragmatic recommendations for cloud, application, infrastructure, data and AI-enabled solutions.
• Perform threat modelling using STRIDE, MITRE ATT&CK or equivalent methods and translate findings into implementable controls.
• Review RESTful APIs, containerised microservices, identity patterns, and third-party integrations for security risks.
• Advise engineering and architecture teams on secure-by-design principles across the delivery lifecycle.
• Assess security posture across endpoints, networks, cryptography, IAM, and hybrid cloud domains.
• Support vulnerability remediation, security governance, risk acceptance, and incident investigation activities.
• Interpret and apply ISO 27000 series, PCI DSS, COBIT, NIST and OWASP guidance in enterprise environments.
• Communicate complex security risks and options clearly to technical and senior business stakeholders. Essential experience and skills
• Minimum 8 years of relevant professional experience, including substantial hands-on experience in the core specialisms of this role.
• Broad enterprise cyber security knowledge across cloud, AI, endpoint, network, cryptography and IAM.
• Hands-on experience with public and/or private cloud environments.
• Strong understanding of modern architectures, APIs, containers, and microservices.
• Practical threat modelling and risk assessment experience.
• Knowledge of security control frameworks, standards, and secure engineering practices.
• Strong stakeholder management, consulting, and written communication skills. Qualifications and certifications
• Bachelor's degree in cyber security, computer science, engineering, data science or related discipline, or equivalent professional experience.
• CISSP, CISM or CCSP, or equivalent security management certification.
• CEH, OSCP or equivalent technical security certification. Cloud security or cyber security architecture certification is desirable. Core behaviors
• Strong ownership, analytical thinking, and delivery focus.
• Ability to collaborate across UK and offshore, multidisciplinary teams.
• Clear communication with both technical and non-technical stakeholders.
• Commitment to secure, ethical and compliant engineering practices.
• Curiosity and continuous learning in a rapidly evolving threat and technology landscape.