Security Consultant - IAM, AWS, API, Cryptography, Pen Testing
Up to £700 per day (Outside IR35)
Remote / South London

I am recruiting a Security Consultant on an exclusive basis for a major Insurance brand in their Security function as a matter of urgency.

Key Requirements:

• Strong general Security knowledge across a broad range of topics and the controls used for them (network, internet, application, users, telephony, DLP, vulnerability management, anti-malware etc)
• A good understanding of and the appropriate controls required for IAM / PAM including Directory Services, SSO, CyberArk and white listing
• Strong understanding of AWS Cloud Security, SaaS applications and vendor managed applications
• Ability to create Pen Testing scope and review findings
• Knowledge of API interfaces, common API protocols and methods of interaction including specifying appropriate security controls (AWS API Gateway, MuleSoft)
• Ability to determine data classification and be able to specify requirements for data sharing and data lifecycle management
• Knowledge of cryptography and its implementation to secure data in transit and data at rest
• Experience of ensuring BCP/DR, H/A and Backups are in place for solutions
• Knowledge of methods to manage secrets within applications
• Awareness of secure software development practices including securing source code, SAST, DAST, peer review, release management etc
• Ability to interface with stakeholders, make and clearly communicate decisions, and resist pressure to bypass controls
• Flexibility to self-manage workload, good time management ability and able to plan and prioritise tasks, respond quickly to unanticipated demand and ad-hoc requests

Nice to have:
• Immediate availability
• Previous Insurance industry experience

If interested, with relevant experience, please apply with a latest CV ASAP.