Technical Security Consultant - Threat Modeling

You will be part of the Security Consultancy sub-team, providing specialist technical security advice to collaborate with technical and business teams throughout the digital solutions life cycle. The team is responsible for owning and developing Security Patterns, Security Specifications, and the Threat Modelling Framework to support secure technology innovation in a changing threat landscape. Key Responsibilities: - Lead as an internal consultant at Manager level to an assigned Platform/Product/Capability/Practice Management area, providing technical security direction, stakeholder management, and driving improvements in ways of working. - Collaborate with programs, projects, product, and engineering teams to deliver digital solutions meeting business needs by supporting and contributing to design reviews. - Ensure proposed designs, builds, and runs comply with client security requirements, implementing all applicable security controls and patterns. - Collaborate with internal Design Authorities and Change Management functions to review, support, and align change initiatives with security requirements. - Use threat modeling to provide risk and threat-based advice to program stakeholders, offering actionable recommendations in the design and implementation of digital solutions. - Advise on secure-by-design adoption of AI/GenAI capabilities, including data protection, model/service selection considerations, and technical guardrails. - Manage security testing requirements for new systems and products in collaboration with the Security Testing function. - Conduct Post Deployment Security Architecture reviews of existing digital solutions. - Support the creation of secure development guidance documentation, eLearning, security patterns, and specifications in collaboration with Engineering/Development teams and Enterprise Security Architecture. - Provide solution architecture support for security solutions, such as AI and IAM. - Work towards achieving professional certifications as part of personal development. - Share experiences with others to promote good security hygiene and its benefits. Qualifications Required: - Work experience in at least one of the following roles: Infrastructure/Solution Architect, Technical Security Architect/Consultant, Security Operations, or Secure application development. - Good understanding of application, cloud, and SaaS security concepts, best practices, and industry standards, including AI/GenAI security concepts. - Hands-on experience in securing digital products/solutions in areas like Artificial intelligence, Cloud, Networks, Operating Systems and hardware, and Security Solutions. - Experience in working in an Agile/DevOps software development environment using Threat Modelling. - Ability to adapt communication style to explain technical concepts to different stakeholders within an organization. - Experience in prioritizing and delivering in environments with evolving requirements. - Ability to navigate complex security problems to find balanced outcomes, taking ownership of activities. Desired Skills: - Familiarity with Container/serverless platforms, Infrastructure/network security, Modern application development processes, and testing, and AI/GenAI security. - Technical security certifications like CISSP, CCSP, or Microsoft/Google/AWS technologies. - Experience in customer service/regulated environments, delivering high-quality information security services. You will be part of the Security Consultancy sub-team, providing specialist technical security advice to collaborate with technical and business teams throughout the digital solutions life cycle. The team is responsible for owning and developing Security Patterns, Security Specifications, and the Threat Modelling Framework to support secure technology innovation in a changing threat landscape. Key Responsibilities: - Lead as an internal consultant at Manager level to an assigned Platform/Product/Capability/Practice Management area, providing technical security direction, stakeholder management, and driving improvements in ways of working. - Collaborate with programs, projects, product, and engineering teams to deliver digital solutions meeting business needs by supporting and contributing to design reviews. - Ensure proposed designs, builds, and runs comply with client security requirements, implementing all applicable security controls and patterns. - Collaborate with internal Design Authorities and Change Management functions to review, support, and align change initiatives with security requirements. - Use threat modeling to provide risk and threat-based advice to program stakeholders, offering actionable recommendations in the design and implementation of digital solutions. - Advise on secure-by-design adoption of AI/GenAI capabilities, including data protection, model/service selection considerations, and technical guardrails. - Manage security testing requirements for new systems and produc