Application and Cloud Security Consultant

A consulting role in the Secure by Design practice of a specialist cyber security consultancy working with large enterprises in telecoms, banking, insurance, automotive and critical infrastructure. The work is shaped by the new wave of EU regulation, NIS2, DORA, the Cyber Resilience Act and the AI Act, and by delivering security that engineering teams go on to implement.

The role

• Running threat modelling workshops with product and platform teams, and advising decision-makers on Secure by Design.
• Analysing complex cloud, software and AI architectures, and improving technical and organisational controls to derive measurable key risk indicators.
• Hands-on work integrating security tools into CI/CD pipelines, improving secure SDLC processes, and working with infrastructure code where needed.
• Presenting and facilitating with technical and non-technical stakeholders alike.

What is needed

• At least three years in cyber security, for example in consulting, cloud or software engineering.
• Practical experience of security risk assessments, and of producing security concepts that engineering teams went on to use.
• Solid hands-on knowledge of at least one of cloud security (AWS, Azure or GCP), threat modelling, application security or CI/CD security tooling.
• Confidence in front of a client: running workshops, presenting findings, writing for a CISO or product owner.
• Clear written and spoken English.

German at B2 or above, familiarity with the Cyber Resilience Act or AI Act, a recognised risk method (ISO 27005, NIST 800-30, FAIR or BSI 200-3), a cloud security certification, and Kubernetes, Terraform or container security are all a real plus. EU Blue Card sponsorship and relocation support are available.