Essential Skills/Experience :

- Have worked in at least one of : Infrastructure/Solution Architect, Technical Security Architect/Consultant, Security Operations, or Secure application development.

- A good understanding of concepts and their application across several key areas including application, cloud, and SaaS security, best practices, and industry standards (and where relevant, AI/GenAI security concepts).

- You will bring hands on experience and knowledge in securing digital products/solutions in at least one or more of the following areas :

1. Artificial intelligence (e.g. AWS Bedrock, CoPilot, CoPilot Studio, Google Gemini, Azure OpenAI, Google Vertex)

2. Cloud (e.g. AWS, Azure/M365, Google, ServiceNow, SAP)

3. Networks (e.g. firewalls, routers, switches, WIFI, LAN/WAN, SDN)

4. Operating Systems and hardware (e.g. Microsoft, Linux, Apple, Android)

5. Security Solutions (e.g. Entra ID, CyberArk, SailPoint, Threat Modeler)

- Good experience of working in an Agile/DevOps software development environment using Threat Modelling.

- Be able to demonstrate the ability to adapt communication style to explain technical concepts to different people within an organisation whether advising stakeholders, directing teams, or sharing experience.

- Experience prioritising and delivering in an environment with competing demands and evolving requirements.

- Able to navigate through complex security problems to find the root cause and a balanced outcome, taking ownership of activities.

Desirable Skills/Experience :

- Container/serverless platforms.

- Infrastructure/network security.

- Modern application development processes and testing.

- AI/GenAI security (e.g. threat modelling for AI solutions, prompt injection and data exfiltration risks, data poisoning/model integrity risks, model/service supply chain considerations, and applying appropriate guardrails and monitoring).

- Have or working towards technical security certifications (e.g. CISSP, CCSP, Microsoft/Google/AWS technologies).

- Having worked in customer service/regulated environments, delivering high quality information security services.