Cyber Security Consultant – Hybrid (Edinburgh, Leeds, Manchester, Bristol)

About the role

Join the Security Consultancy and Design team within Lloyds Banking Group’s Chief Security Office. You will work in a hybrid model, spending at least two days a week in one of our UK offices, and help embed security‑by‑design across a wide portfolio of change initiatives.

Key responsibilities

• Develop and design secure solutions and produce comprehensive Security Design documentation.
• Deconstruct solution and network architectures to identify threats and vulnerabilities.
• Apply industry‑standard threat‑modeling techniques such as STRIDE and MITRE ATT&CK.
• Translate identified threats into risk assessments, advising on likelihood and impact.
• Communicate technical concepts clearly to both technical and non‑technical stakeholders.
• Balance competing security design options and manage multiple projects simultaneously.

Required profile

• Proven ability to design secure solutions and produce security documentation.
• Experience interpreting threats into actionable risk recommendations.
• Strong communication skills for stakeholder engagement.
• Comfortable working on several challenging projects at once.
• Awareness of security standards such as ISO 27000 series, PCI DSS, COBIT, NIST, and OWASP.
• Relevant certifications (e.g., CISSP, CISM, CCSP, CEH, OSCP) are highly desirable.

Required skills

• STRIDE threat modeling
• MITRE ATT&CK framework
• ISO 27000 series
• PCI DSS
• COBIT
• NIST guidelines
• OWASP security principles
• Cloud security (public and private cloud environments)

What we offer

• Competitive salary range of £72,702 – £80,780 per year.
• Hybrid working model with flexibility.
• Opportunity to shape security strategy for a major UK bank.
• Investment in professional development and certifications.