Cyber Security Consultant – Critical Infrastructure

About the role

Jacobs is seeking an experienced Cyber Security Consultant to join its rapidly growing UK Cyber team. You will work across the full lifecycle of IT security engineering, shaping strategy, designing solutions, and delivering hands‑on implementations for critical national infrastructure sectors.

Key responsibilities

• Design, integrate and test cybersecurity solutions for power, water, rail, aviation, highways and defence projects.
• Act as the design authority for secure system lifecycles, covering access control, authentication, encryption, backup, disaster recovery and incident response.
• Develop assessment methodologies, security risk‑management processes and compliance frameworks in collaboration with clients and regulators.
• Conduct security reviews, threat assessments, audits and gap analyses.
• Provide subject‑matter expertise for business development, proposals and client engagements.

Required profile

• Proven experience in IT cybersecurity, preferably within critical national infrastructure or industrial environments.
• Strong understanding of servers, container services, networking, cloud, hosting, storage and security appliances.
• Hands‑on experience with endpoint protection, firewalls, IPS and API security.
• Knowledge of security architecture, GRC, SOC, analyst and forensic services.
• Familiarity with hybrid and multi‑cloud security considerations.

Required skills

• Endpoint protection
• Firewalls
• Intrusion Prevention Systems (IPS)
• API security
• Security architecture
• Governance, Risk & Compliance (GRC)
• Security Operations Centre (SOC)
• Forensic services
• Cloud security (hybrid & multi‑cloud)
• IEC 62443
• NIST Cybersecurity Framework (CSF)
• ISO 27000 series
• MITRE ATT&CK
• GDPR
• NCSC Cyber Assessment Framework (CAF)
• NIS/NIS2 regulations

What we offer

• Opportunity to work on high‑impact projects for critical national infrastructure.
• Access to Jacobs’ global expertise and resources.
• Professional development in a fast‑growing cyber practice.