Cybersecurity Engineer

Salary: £50,000 - 70,000 per year

Requirements:

• Experienced IT professional with cyber security or information security experience
• Technical expertise in threat modelling using STRIDE, PASTA, attack trees, threat-modelling tools and MITRE ATT&CK
• Cyber security experience covering authentication, authorisation, logging and monitoring, encryption, infrastructure security and network segmentation
• Development and DevOps knowledge, including CI/CD, pipelines, SDLC, scripting, Infrastructure as Code (Terraform or CloudFormation), Docker, Kubernetes, serverless and Helm
• Strong programming capability, preferably in Python, including asynchronous programming and FastAPI, plus unit testing with Pytest
• Experience applying security standards and SDLC controls to software platforms
• Experience identifying vulnerabilities using CWE or OWASP, hardening operating systems, and designing or reviewing technical architectures
• Working knowledge of agile/DevOps delivery, Jira, CDK/GitOps, penetration testing, and technologies such as Snowflake, MongoDB, Terraform Cloud, GitHub or Databricks
• Analytical and adversarial mindset, attention to detail, problem-solving ability and commitment to continuous learning
• Strong documentation, research, communication and collaboration skills, including experience building relationships across diverse teams in a regulated environment
• Desirable: professional-level cloud certification, vendor cloud security certification, and professional cyber security certification from AWS, CGP or Azure
• Must operate via an Umbrella or PAYE engagement model

Responsibilities:

• Lead and deliver threat-modelling activities using established methodologies to identify, assess and mitigate security risks across applications and platforms
• Develop and maintain automation tools and Python-based solutions to enhance security processes, operational efficiency and service delivery
• Manage the lifecycle of identified threats and controls, ensuring timely remediation, tracking and validation of security measures
• Deliver high-quality threat models and security assessments within agreed timelines, maintaining accuracy and attention to detail
• Contribute to improving threat-modelling processes, frameworks, tooling and best practices across the organisation
• Present security findings and recommendations to technical teams, senior stakeholders and cross-functional audiences, influencing secure design decisions
• Mentor, train and guide junior team members while supporting the day-to-day operation and evolution of the threat-modelling service

Technologies:

• AWS
• Azure
• CI/CD
• Cloud
• Databricks
• DevOps
• Docker
• FastAPI
• GitHub
• GitOps
• Helm
• JIRA
• Kubernetes
• MongoDB
• Network
• OWASP
• Python
• Security
• Serverless
• Snowflake
• Terraform
• pytest

More:

We are AMS, a global workforce solutions partner committed to creating inclusive, dynamic and future-ready workplaces. We help organisations adapt, grow and thrive by building, shaping and optimising diverse talent strategies. Our Contingent Workforce Solutions service connects clients with skilled interim and temporary professionals and acts as an extension of their recruitment teams. For this role, we are supporting a global Big Four consultancy operating in more than 150 countries and serving public- and private-sector organisations across industries, with advisory work spanning audit, accountancy, tax, corporate finance and consulting. We are recruiting a Cybersecurity Engineer for a six-month contract based in London, with three days per week in the office. The role involves working across cloud, DevOps and regulated security environments with minimal supervision, and presenting technical work to senior and cross-functional stakeholders. We require workers to engage via an Umbrella or PAYE model.

last updated 39 week of 2026