Cyber Security Consultant - Infrastructure Security

Introduction

At IBM CIC, we provide technical and industry expertise to a wide range of public and private sector clients in the UK.

A career in IBM CIC means you’ll have the opportunity to work with leading professionals across multiple industries to improve the hybrid cloud and AI journey for the most innovative and valuable companies in the world. You will get the chance to deliver effective solutions, driving meaningful business change for our clients, using some of the latest technology platforms.

Curiosity and a constant quest for knowledge serve as the foundation to success here. You’ll be encouraged and supported to constantly reinvent yourself, focusing on skills in demand in an ever changing market. You’ll be working with diverse teams, coming up with creative solutions which impact a wide network of clients, who may be at their site or one of our CIC or IBM locations. Our culture of evolution centres on long-term career growth and development opportunities in an environment that embraces your unique skills and experience.

We Offer

• Many training opportunities from classroom to e-learning, mentoring and coaching programs and the chance to gain industry recognized certifications
• Regular and frequent promotion opportunities to ensure you can drive and develop your career with us
• Feedback and checkpoints throughout the year
• Diversity & Inclusion as an essential and authentic component of our culture through our policies and process as well as our Employee Champion teams and support networks
• A culture where your ideas for growth and innovation are always welcome
• Internal recognition programs for peer-to-peer appreciation as well as from manager to employees
• Tools and policies to support your work-life balance from flexible working approaches, sabbatical programs, paid paternity leave, maternity leave and an innovative maternity returners scheme

More traditional benefits, such as 25 days holiday (in addition to public holidays), private medical, dental & optical cover, online shopping discounts, an Employee Assistance Program, life assurance and a group personal pension plan of an additional 5% of your base salary paid by us monthly to save for your future.

Your Role And Responsibilities

As a Senior Security Consultant specializing in Infrastructure Security, you will advise and guide clients on securing their hybrid cloud and infrastructure environments. You will assess risks, identify vulnerabilities, and design strategies to strengthen their security posture. By applying zero trust principles, industry frameworks, and technical expertise across cloud, networks, and operating systems, you will develop security roadmaps, remediation plans, and incident response strategies that align with business needs. This role offers the opportunity to work directly with IT and business leaders to design secure infrastructures and deliver resilient, business-driven security outcomes.

Responsibilities

• Conduct assessments, workshops, and interviews with client stakeholders to identify infrastructure security challenges and risks.
• Design secure network and infrastructure architectures for hybrid cloud environments.
• Apply zero trust principles to strengthen infrastructure security strategies and programs.
• Lead the development of remediation plans, incident response procedures, and security roadmaps tailored to client business needs.
• Provide consulting services to analyze and resolve infrastructure-related security incidents.
• Perform risk assessments and recommend effective mitigation strategies.
• Advise on compliance requirements (e.g., HIPAA, PCI-DSS, GDPR) and ensure alignment with client security policies.
• Support clients in developing and testing disaster recovery and business continuity plans.

Collaborate with cross-functional teams to integrate security into infrastructure and application design.

Preferred Education

Bachelor's Degree

Required Technical And Professional Expertise

• Strong understanding of network security (protocols, firewalls, VPNs, IDS/IPS).
• Knowledge of cloud security practices for platforms such as AWS, Azure, or Google Cloud.
• Proficiency in operating systems administration and security (Linux, Windows Server).
• Hands-on experience with security tools (e.g., vulnerability scanners, SIEM platforms, encryption tools).
• Solid grounding in cryptography, including encryption algorithms and secure key management.
• Familiarity with compliance standards (HIPAA, PCI-DSS, GDPR, etc.).
• Proven ability to conduct risk assessments and design secure infrastructure solutions.
• Knowledge of incident response processes and disaster recovery planning.
  
  

As an equal opportunities’ employer, we welcome applications from individuals of all backgrounds. However, for you to be eligible for this role, you must have the valid right to work in the UK. Unfortunately, we do not offer visa sponsorship and have no future plans to do so. You must be a resident in the UK and have been living continuously in the UK for the last 3-5 years. You must be able to hold or gain a UK government security clearance.

Preferred Technical And Professional Experience

• Experience in designing and implementing hybrid cloud infrastructure security strategies.
• In-depth knowledge of zero trust architectures and their application to enterprise environments.
• Advanced certifications such as CISSP, CCSP, CISM, or cloud security certifications (e.g., AWS Security Specialty, Azure Security Engineer Associate, GCP Professional Cloud Security Engineer).
• Demonstrated experience in client-facing consulting roles, with the ability to translate technical security challenges into clear business outcomes.
• Strong presentation and stakeholder management skills, with a proven track record of advising IT and business executives.