security consultant

EPAM Systems

<div>We're looking for an AI Security Consultant to join our team in the UK in a hybrid working mode. In this role, you will help clients design and secure AI systems that they can trust, addressing emerging risks across generative AI, agent-based workflows and traditional machine learning pipelines. Acting at the intersection of cybersecurity, machine learning and consulting, you will influence enterprise-wide adoption of secure AI practices and ensure compliance with evolving regulations such as the EU AI Act.
This is a hands-on role with client-facing responsibility, balancing technical depth with strategic guidance. You will work across multiple sectors, supporting EPAM's growing Cybersecurity practice and shaping our AI security capabilities as this rapidly evolving field matures.
Responsibilities<ul><li>
Lead security assessments of AI/ML systems, including LLM applications and ML pipelines
</li><li>Threat-model AI architectures using frameworks such as OWASP LLM Top 10, MITRE ATLAS and NIST AI RMF
</li><li>Advise clients on securing AI lifecycle from data sourcing to deployment and monitoring
</li><li>Define security controls for prompt injection, jailbreaks, data poisoning and supply-chain risk
</li><li>Translate AI regulations and data-protection laws into actionable security requirements
</li><li>Perform adversarial testing and red-teaming of generative AI applications
</li><li>Create documentation, secure design patterns and reference architectures for client teams
</li><li>Act as a trusted advisor for senior stakeholders and support EPAM pre-sales where needed</li></ul>
Requirements<ul><li>
5+ years of cybersecurity experience, ideally with consulting exposure
</li><li>Knowledge of AI/ML concepts, generative AI stack, LLMs, RAG and MLOps pipelines
</li><li>Familiarity with AI security frameworks such as OWASP LLM Top 10 and MITRE ATLAS
</li><li>Understanding of cloud security across AWS, Azure or GCP
</li><li>Awareness of AI-related regulations and data-protection requirements
</li><li>Strong communication skills for both technical and executive audiences
</li><li>Ability to deliver structured solutions in fast-moving, ambiguous environments
</li></ul>Nice to have<ul><li>
Certifications such as CISSP, CCSP, OSCP or related cloud credentials
</li><li>Practical experience in AI red-teaming or penetration testing
</li><li>Background in software engineering or data science</li></ul>
We offer<ul><li>
EPAM Employee Stock Purchase Plan (ESPP)</li><li>
Protection benefits including life assurance, income protection and critical illness cover</li><li>
Private medical insurance and dental care</li><li>
Employee Assistance Program</li><li>
Competitive group pension plan</li><li>
Cyclescheme, Techscheme and season ticket loans</li><li>
Various perks such as free Wednesday lunch in-office, on-site massages and regular social events</li><li>
Learning and development opportunities including in-house training and coaching, professional certifications, and courses</li><li>
If otherwise eligible, participation in the discretionary annual bonus program</li><li>
If otherwise eligible and hired into a qualifying level, participation in the discretionary Long-Term Incentive (LTI) Program</li></ul></div>

AI Security Consultant

Marks & Spencer

Specialist Security Consultant

Principal Security Consultant

VerTALENTS

<div><div>VerTALENTS is a subsidiary of VerSprite Cybersecurity. Specializing in technology staffing and utilizing a network of technical clients, VerTALENTS connects top level technical talent with industry clients through various methods and expands not only clients talent network, but candidates job search as well. At the bottom line, VerTALENTS adds value to both clients and candidates alike.

We work with clients to fill both full-time and contracting opportunities, so If the following job interests you, please apply to learn more!</div> 


Sr. Offensive Security Consultant (Alpha Group)

Location: Remote (U.S.) &mdash; Georgia preferred

This is a fully remote role. Candidates must be authorized to work in the United States. While remote, candidates located in Georgia or nearby states are strongly preferred to facilitate collaboration with internal teams and clients.

Overview

VerSprite is seeking an experienced Sr. Offensive Security Consultant to lead complex security assessments across modern enterprise environments.

This role focuses on advanced penetration testing and application security engagements while working closely with clients to identify real-world attack paths and security risks.

The ideal candidate combines strong technical expertise with consulting experience and the ability to clearly communicate security risk to both technical and executive audiences.

Responsibilities
<ul><li>Lead penetration testing engagements across web applications, APIs, and enterprise infrastructure</li></ul>
<ul><li>Perform advanced application security testing including business logic flaws and authentication weaknesses</li></ul>
<ul><li>Conduct internal and external network penetration testing</li></ul>
<ul><li>Lead Red Teaming engagements.</li></ul>
<ul><li>Perform threat modeling exercises (e.g., PASTA methodology)</li></ul>
<ul><li>Conduct cloud security assessments across AWS, Azure, and GCP</li></ul>
<ul><li>Perform mobile application security testing (Android and iOS)</li></ul>
<ul><li>Develop custom payloads and exploitation techniques</li></ul>
<ul><li>Produce detailed technical reports including proof-of-concept exploitation scenarios</li></ul>
<ul><li>Communicate technical findings and risk to client stakeholders</li></ul>
<ul><li>Mentor junior consultants during engagements</li></ul>
<ul><li>Contribute to internal research initiatives and security methodology improvements</li></ul>

Required Qualifications
<ul><li>7+ years of experience in offensive security or penetration testing</li></ul>
<ul><li>Strong experience in web application, API penetration testing, external and internal network assessments. Experience testing Active Directory environments.</li></ul>
<ul><li>Experience leading Red Teaming engagements.</li></ul>
<ul><li>Strong experience writing penetration testing reports and technical documentation</li></ul>
<ul><li>Ability to communicate security risks to technical and non-technical stakeholders</li></ul>
<ul><li>Strong communication skills both written and spoken.</li></ul>
<ul><li>Experience working in consulting or client-facing environments</li></ul>

Nice to Have
<ul><li>Offensive security certifications such as OSCP, OSWE, OSEP, CRTO, or similar</li></ul>
<ul><li>Experience performing hardware / product security testing.</li></ul>
<ul><li>Public vulnerability disclosures</li></ul>
<ul><li>Participation in bug bounty programs</li></ul>
<ul><li>Security research publications or blog posts</li></ul>
<ul><li>Contributions to open-source security tools</li></ul>
<ul><li>Active participation in the security community (CTFs, conferences, etc.)</li></ul></div>

Sr. Offensive Security Consultant (Alpha Group)

Bridewell

<div>Start Date: 14th September 2026
About Bridewell
One of the most exciting prospects in the UK cyber security sector today, Bridewell is a leading cyber security services company specialising in protecting and transforming critical business functions for some of the world&rsquo;s most trusted organisations. We are the trusted partner for operators of essential services and provide end-to-end cyber security capabilities that help our clients overcome their security challenges, allowing them to operate safely and securely.
Bridewell holds the Gold level, Investors in People award which we feel solidifies and reflects on the outstanding calibre that makes us truly one team.
The Opportunity
In the first three months of the Bridewell Academy, you will undergo comprehensive onboarding, where you will meet your manager and assigned buddy, who will guide you through the initial stages of your journey. During this period, you will gain exposure to our Cloud Engineering team, allowing you to familiarise yourself with cloud architecture, modern engineering practices, and the Microsoft 365 security stack &mdash; including Microsoft Defender (XDR), Microsoft Sentinel, and Microsoft Purview &mdash; alongside equivalent capabilities across other hyper-scalers. You will complete foundational training, such as the Microsoft Certified: Azure Fundamentals (AZ-900), Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900), and AWS Certified Cloud Practitioner courses, and become acquainted with our learning management systems, setting a solid foundation for your professional development.
As you progress into the three to six-month mark, you will begin shadowing and contributing to client-facing cloud projects, where you'll apply your skills in real-world scenarios. This hands-on experience will be invaluable as you collaborate with senior consultants on deployments, configuration tasks, and technical documentation across Microsoft Azure, Microsoft 365, AWS, and GCP environments &mdash; with early exposure to security tooling such as Microsoft Defender, Microsoft Entra and Microsoft Sentinel.
Between six to eighteen months, you will continue working on client-facing projects both independently and as part of a squad, enhancing your practical experience in the field. During this time, you will focus on completing essential certifications such as:
<ul><li>Microsoft Certified: Azure Administrator Associate (AZ-104)</li><li>
Microsoft Certified: Security Operations Analyst Associate (SC-200)</li><li>
Microsoft Certified: Information Protection and Compliance Administrator Associate (SC-401)
</li><li>Microsoft Certified: Cloud and AI Security Engineer (SC-500)</li><li>
AWS Certified Solutions Architect &ndash; Associate or Google Associate Cloud Engineer</li></ul>
Achieving these qualifications will further prepare you for your future role, culminating in your pathway to becoming academy certified. This structured progression ensures you are well-equipped with the knowledge and hands-on experience needed to thrive in a modern multi-cloud and cloud-security engineering career. 
Requirements 
Responsibilities<ul><li>
Support Client Engagements: Assist in the delivery of high-quality cloud engineering projects. Help clients design, deploy, and operate workloads across Microsoft Azure, Microsoft 365, AWS, and GCP, contributing to activities such as landing zone builds, identity and access configuration, network design, and the deployment and tuning of Microsoft Defender, Microsoft Sentinel, and Microsoft Purview alongside equivalent native security services in other clouds.</li><li>
Stay Informed: Actively engage in professional development by attending relevant training sessions, hackathons, vendor workshops (Microsoft, AWS, Google), and industry conferences to remain current with the latest cloud services, security tooling, architectural patterns, and engineering best practices.</li><li>
Collaborate with Consultants: Work closely with senior cloud and security engineers on project tasks &mdash; helping to gather requirements, build proofs-of-concept, author detections and analytics rules in Sentinel, configure Defender policies, script automation (e.g. PowerShell, KQL, Bicep, Terraform, ARM, CloudFormation), and prepare technical documentation to ensure project objectives are met efficiently and effectively.</li><li>
Participate in Team Meetings: Join regular squad stand-ups, design reviews, and retrospectives to discuss project progress, share insights, and gather feedback, fostering a collaborative engineering culture and enhancing your personal learning.</li><li>
Conduct Technical Research: Help with preliminary research on emerging cloud and security services, reference architectures, and comparative analysis between vendors (Azure/M365 vs. AWS vs. GCP) to support project work and internal capability development.</li><li>
Engage with Clients: Participate in client meetings, technical workshops, and whiteboarding sessions as needed, providing support and gathering information to understand client requirements and contribute to high-quality service delivery.</li></ul>
Experience<ul><li>
A degree in Computer Science, Cloud Computing, Cyber Security, an equivalent qualification, or completion of a cloud/engineering-focused training course or bootcamp.</li><li>
Minimum grade of 4/C in GCSE English Language and Maths (or equivalent).</li><li>
Three A-levels or five Highers (or equivalent).</li><li>
No work experience is needed as this is an entry-level position. We are looking for someone who will show potential for these roles through their transferable skills. Curiosity about cloud and security technology, confidence, relationship building, and a self-starter mentality are all welcome &mdash; alongside a huge eagerness to learn and build!</li></ul> 

Benefits 
Why join us?
Our vision is to create a safe, inclusive digital world where people and organisations can thrive. Our values of Do the Right Thing, One Team and Above and Beyond emphasises the importance of the part we play in society, and our commitment to our people and clients. Our story to-date has been phenomenal, but success doesn&rsquo;t end here and as we continue to grow and scale, we want to keep the same culture, passion and commitment to high quality that has enabled us to get this far. Bridewell will provide a great career opportunity with continual development as well as the following:
<ul><li>25 Days Holiday - Plus buy and sell options
</li><li>Flexible Working (around core office hours)
</li><li>Company Pension
</li><li>Employee Shareholder Scheme
</li><li>Personal Day &amp; Birthday Off - After 1 year of service
</li><li>Family Leave &ndash; After 1 year of service
</li><li>Life Assurance
</li><li>Electric Vehicle Scheme &amp; Cycle to Work Scheme</li><li>
Private Healthcare (incl. Gym discounts and vison care)</li></ul>
Location: Bridewell operates a hybrid and flexible working policy, however you will be required to travel to different sites on occasion, in particular our London office.
Note: To be eligible for this job you must either hold UK Security Clearance or be eligible and willing to go through this security clearance Bridewell values diversity and is an equal opportunity employer. We are dedicated to fostering an inclusive environment where all employees feel respected, supported, and empowered to do their best work. If you require any reasonable adjustments throughout the interview process please let us know.</div>

Academy Cloud Security Consultant

Truist

<div>The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.
Need Help?
If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response).
Regular or Temporary:
Regular
Language Fluency: English (Required)
Work Shift:
1st shift (United States of America)<h3 class="jobSectionHeader">
Please review the following job description:</h3>
Designs advanced technical and cybersecurity capabilities across all phases of the software development lifecycle, including threat modeling, security testing, and penetration testing. Plans, builds, and enhances cybersecurity technologies by baselining systems, analyzing trends, and preparing for future requirements to deliver reliable, scalable, and secure technology solutions with significant impact on the job area.
ESSENTIAL DUTIES AND RESPONSIBILITIES 
Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time. 
1. Designs and implements cybersecurity solutions that protect critical assets within the job area, contributing to the technical design and implementation approach while following established strategies and patterns. 
2. Performs threat modeling, security testing, and penetration testing for the platforms and services in scope, using structured analysis to identify and remediate significant vulnerabilities. 
3. Integrates and configures information security technologies in production environments, implementing and refining configuration patterns, automation, and handoff steps for assigned systems or services. 
4. Serves as a technical escalation point within the team for challenging security issues, investigating root causes and developing practical, reusable fixes that improve team workflows. 
5. Evaluates relevant security threats, tools, and design options, and provides input that helps shape technical plans, priorities, and goals for the job area. 
6. Collaborates closely with product and engineering teammates to apply security architecture guidance, securebydesign practices, and governance controls in daytoday development activities. 
7. Develops and maintains security baselines, guardrails, and control implementations for systems and applications in the area of responsibility, helping support regulatory and policy compliance. 
8. Leads the technical execution of incident response and basic forensic activities for services in scope, following playbooks, coordinating tasks with teammates, and suggesting improvements to procedures and tooling. 
9. Provides guidance, coaching, and informal training to other security engineers and technical teammates, sharing best practices through design and code reviews and knowledgesharing sessions. 
10. Leads significant security engineering workstreams or endtoend processes within the job area, coordinating contributions from lowerlevel technical professionals and reviewing outputs for quality and alignment.
Qualifications 
Required Qualifications 
The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. 
1. Bachelor&rsquo;s degree or equivalent education, training, and work-related experience. 
2. Minimum of 5 years of experience in security engineering or related cybersecurity roles. 
3. Advanced knowledge in cybersecurity principles, theories, and concepts. 
4. Proven experience in software development lifecycle security practices. 
5. Advanced knowledge of threat modeling, security testing, and penetration testing. 
6. Experience implementing and managing complex information security technologies.
Preferred Qualifications 
1. Advanced cybersecurity certifications (e.g., CISSP, CISM, CEH, GIAC). 
2. Experience with security automation, orchestration, and advanced threat detection tools. 
3. Familiarity with emerging cybersecurity technologies, industry trends, and strategic risk management.
General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist&rsquo;s generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truist&rsquo;s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.
Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace.
EEO is the Law E-Verify IER Right to Work</div>

Senior Associate Information Security Consultant

<div>The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.
Need Help?
If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response).
Regular or Temporary:
Regular
Language Fluency: English (Required)
Work Shift:
1st shift (United States of America)<h3 class="jobSectionHeader">
Please review the following job description:</h3>
Deliver technically advanced solutions in support of Truist&rsquo;s Anti-Money Laundering (AML) Technology initiatives, with a focus on Machine Learning and Generative AI use cases. Partner with application teams, product owners, and internal stakeholders to design, guide, and implement model-driven solutions. Provide subject matter expertise throughout the model lifecycle, from concept through governance, approval, and deployment.
ESSENTIAL DUTIES AND RESPONSIBILITIES 
Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.<ul><li>
Serve as a technical advisor across AML Technology teams for Machine Learning and Generative AI initiatives, supporting multiple use cases and applications.</li><li>
Collaborate with application teams, vendors, and internal partners to design, develop, and deploy predictive and AI-driven models aligned with financial crime detection objectives.</li><li>
Provide expertise in model development, integration, and deployment &mdash; including supporting teams in configuring solutions, performing analysis, and enabling scalable implementations.</li><li>
Guide and influence best practices for Machine Learning and AI adoption within AML Technology, helping define standards, approaches, and reusable frameworks.</li><li>
Lead and contribute to model lifecycle activities, including development, testing, validation support, implementation, and post-deployment monitoring.</li><li>
Support development of required model documentation, including Model Definition Documents (MDD), and ensure alignment with internal standards and regulatory expectations.</li><li>
Partner with application teams to navigate AI governance processes, including model review, validation, risk assessment, and approval workflows required for production deployment.</li><li>
Build and support monitoring, performance evaluation, and controls for models and associated applications in production environments.</li><li>
Ensure adherence to security, compliance, and enterprise technology standards across all implemented solutions.</li><li>
Help solve complex technical and operational challenges related to model integration, data pipelines, and AI deployment in enterprise systems.</li><li>
Act as a mentor and resource for teammates, providing guidance on Machine Learning techniques, financial crime use cases, and technical implementation strategies.</li></ul>
QUALIFICATIONS
Required Qualifications:
The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.<ul><li>
Bachelor&rsquo;s degree in Computer Science, Information Systems, or related field, or equivalent experience.</li><li>
Minimum of 3 years of experience in information security, systems analysis, or related technical field.</li><li>
Foundational knowledge of data security principles, system architecture, and security controls.</li><li>
Experience or exposure to system monitoring, data analysis, or risk identification activities.</li></ul>
Preferred Qualifications:<ul><li>
Strong experience with Machine Learning techniques, model development, and deployment in enterprise environments.</li><li>
Exposure to Generative AI technologies and frameworks (e.g., LLMs, prompt engineering, model orchestration).</li><li>
Working knowledge of financial crimes / AML domain concepts (e.g., transaction monitoring, suspicious activity detection, fraud analytics).</li><li>
Experience supporting or contributing to model governance, validation, or regulatory processes.</li><li>
Strong foundation in data structures, algorithms, and software engineering principles.</li><li>
Familiarity with open-source ML frameworks and tools (e.g., Python, TensorFlow, PyTorch, Scikit-learn).</li><li>
Experience with cloud platforms such as AWS, Azure, or GCP, including ML/AI services.</li><li>
Experience with data platforms, SQL, and data modeling.</li><li>
Familiarity with CI/CD pipelines and tools such as Git, Jenkins, Maven.</li></ul>
General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist&rsquo;s generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truist&rsquo;s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.
Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace.
EEO is the Law E-Verify IER Right to Work</div>

Senior Associate Information Security Consultant - Machine Learning & Agentic AI Solutions Lead for AML Technology

Search 8001+ Security consultant jobs near you this July. New roles added regularly across leading industries. Apply today.