Cloud Security Consultant
Posted 2 weeks ago by HOK Consulting - Technical Recruitment Consultancy
Negotiable
Undetermined
Hybrid
Birmingham, England, United Kingdom
Summary: The role of DevSecOps Consultant/Cloud Security Consultant focuses on enhancing secure delivery practices within a VMware-based platform. The consultant will leverage their expertise in DevSecOps principles to establish secure CI/CD pipelines and integrate cyber controls throughout the development lifecycle. Collaboration with engineering and architecture teams is essential to define and implement a comprehensive DevSecOps roadmap. The position requires a strong understanding of security practices and the ability to communicate effectively with stakeholders.
Key Responsibilities:
- Conduct security reviews of the existing platform and pipelines.
- Define and deliver a DevSecOps roadmap with the engineering and architecture teams.
- Implement best practices for secrets management and code scanning capabilities.
- Collaborate with developers and stakeholders to ensure security is built-in, not bolted on.
- Provide guidance and technical input on secure platform design and operations.
Key Skills:
- Strong background in DevOps or development, with solid security appreciation.
- Knowledge of VMware platforms, CI/CD tooling, and automation pipelines.
- Experience with application security, SAST/DAST tools, and secrets management.
- Excellent communication and stakeholder management skills.
- Hands-on technical expertise preferred but not mandatory.
Salary (Rate): undetermined
City: Birmingham
Country: United Kingdom
Working Arrangements: hybrid
IR35 Status: undetermined
Seniority Level: undetermined
Industry: IT
Job Title: DevSecOps Consultant/ Cloud Security Consultant
Location: Hybrid (x2-3 days per week to Sheffield or Birmingham)
Employment Type: Contract
We’re looking for a DevSecOps / Security Consultant to enhance our secure delivery practices across a VMware-based platform. The ideal candidate will bring a strong understanding of DevSecOps principles, enabling secure CI/CD pipelines and embedding cyber controls throughout the development lifecycle.
Key Responsibilities:
- Conduct security reviews of the existing platform and pipelines.
- Define and deliver a DevSecOps roadmap with the engineering and architecture teams.
- Implement best practices for secrets management and code scanning capabilities.
- Collaborate with developers and stakeholders to ensure security is built-in, not bolted on.
- Provide guidance and technical input on secure platform design and operations.
Skills & Experience:
- Strong background in DevOps or development, with solid security appreciation.
- Knowledge of VMware platforms, CI/CD tooling, and automation pipelines.
- Experience with application security, SAST/DAST tools, and secrets management.
- Excellent communication and stakeholder management skills.
- Hands-on technical expertise preferred but not mandatory.