SME IT Security

Job description

Job Description - Cyber Security Specialist (Security Connector) Function: CSO Role: Cyber Security Specialist - Security Connector Hiring Managers: Louise Furniss / Julie Wilson Grade: E/F Location: UK Open Positions: 2 Duration: Enduring (15 Months+) ________________________________________ Job Summary • Join the Cyber Security team to provide security expertise across enterprise technologies, cloud platforms, and emerging AI solutions. • Support the assessment, design, and implementation of security controls across digital transformation initiatives. • Partner with engineering, architecture, and business teams to embed security throughout the software development lifecycle. • Evaluate security risks associated with modern architectures, APIs, microservices, cloud environments, and third-party integrations. • Contribute to threat modelling, security reviews, and risk assessments to ensure robust cyber resilience. • Help strengthen organizational security posture by applying industry standards, frameworks, and best practices. • Act as a trusted security advisor, enabling secure innovation while balancing business and regulatory requirements. ________________________________________ Key Responsibilities • Conduct security assessments and provide recommendations for cloud, application, infrastructure, and AI-based solutions. • Perform threat modelling activities using frameworks such as STRIDE, MITRE ATT&CK;, or equivalent methodologies. • Review APIs, containerized services, and microservice architectures to identify security risks and vulnerabilities. • Collaborate with development and operations teams to ensure secure-by-design principles are implemented. • Support incident investigations, vulnerability remediation activities, and security governance initiatives. • Evaluate compliance against industry standards including NIST, ISO 27001, PCI DSS, OWASP, and COBIT. • Provide technical security guidance and contribute to security policies, standards, and best practice documentation. Key Responsibilities Skill Requirement • Broad knowledge of enterprise technology environments, including cloud computing, AI, networking, and modern application architectures. • Strong understanding of cyber security domains including endpoint security, network security, cryptography, identity and access management (IAM), and application security. • Experience securing RESTful APIs, containerized applications, and microservices-based platforms. • Hands-on experience with threat modelling, risk assessment, vulnerability management, and security architecture reviews. • Understanding of public cloud and private cloud security controls, architectures, and governance practices. • Familiarity with security frameworks and standards such as ISO 27001, NIST, PCI DSS, COBIT, and OWASP. • Strong analytical, communication, stakeholder management, and problem-solving skills within complex enterprise environments. ________________________________________ Technical Certification Need to Have and Good to Have Need to Have • CISSP (Certified Information Systems Security Professional) or equivalent security management certification. • CISM (Certified Information Security Manager) or equivalent security governance certification. • CCSP (Certified Cloud Security Professional) or equivalent cloud security certification. • Demonstrated knowledge of enterprise cyber security controls, risk management, and security governance. • Experience working within public cloud and/or private cloud environments. Good to Have • CEH (Certified Ethical Hacker). • OSCP (Offensive Security Certified Professional). • AWS Certified Security - Specialty. • Microsoft Certified: Cybersecurity Architect Expert (SC-100) or equivalent. • Azure Security Engineer Associate (AZ-500). • GIAC certifications (GSEC, GCIH, GPEN, or equivalent). • Certifications related to threat intelligence, cloud security, DevSecOps, or Zero Trust security architectures. Skill Requirements Additional Context • Immediate demand is currently being fulfilled by specialist niche suppliers. • The long-term strategy is to build sustainable capability through Tech NPW partners for future cyber security requirements. • The role requires strong collaboration across security, engineering, architecture, and business teams to deliver secure enterprise solutions. • Candidates should demonstrate a proactive security mindset, continuous learning attitude, and the ability to adapt to evolving threat landscapes. • Exposure to AI security, cloud-native security, and modern digital platforms will be highly advantageous. Other Requirements Additional Context • Immediate demand is currently being fulfilled by specialist niche suppliers. • The long-term strategy is to build sustainable capability through Tech NPW partners for future cyber security requirements. • The role requires strong collaboration across security, engineering, architecture, and business teams to deliver secure enterprise solutions. • Candidates should demonstrate a proactive security mindset, continuous learning attitude, and the ability to adapt to evolving threat landscapes. • Exposure to AI security, cloud-native security, and modern digital platforms will be highly advantageous. Apply now Information at a Glance Why HCLTech? At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first. HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026 totaled $14.8 billion. Disclaimer Privacy Statement Terms of use Sitemap Raise a Grievance We use cookies on our site. Please read more about cookies policy here. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Copyright © 2026 HCL Technologies Limited Cookie Consent Manager When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer. Required Cookies These cookies are required to use this website and can't be turned off. Required Cookies Required Cookies Provider Description Enabled SAP as service provider We use the following session cookies, which are all required to enable the website to function: "route" is used for session stickiness "careerSiteCompanyId" is used to send the request to the correct data center "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor "Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another Cookies from provider SAPasserviceprovider are required and cannot be turned off Functional Cookies These cookies provide a better customer experience on this site, such as by remembering your login details, optimizing video performance, or providing us with information about how our site is used. You may freely choose to accept or decline these cookies at any time. Note that certain functionalities that these third-parties make available may be impacted if you do not accept these cookies. Consent to all Functional Cookies Functional Cookies Provider Description Enabled Vimeo Vimeo is a video hosting, sharing, and services platform focused on the delivery of video. Opting out of Vimeo co