Information Security Consultant

**Company Description**
Technology is our how. And people are our why. For over two decades, we have been harnessing technology to drive meaningful change.

By combining world-class engineering, industry expertise and a people-centric mindset, we consult and partner with leading brands from various industries to create dynamic platforms and intelligent digital experiences that drive innovation and transform businesses.

From prototype to real-world impact - be part of a global shift by doing work that matters.

Our infrastructure specialists are responsible for designing and implementing back-end services. They ensure reliability, security, and scalability for all platform layers within our solutions. Infrastructure teams provide expertise across virtualization, cloud services, storage solutions, cybersecurity, and scripting and automation.

**Responsibilities**:

- Deploy complex tooling into an existing infrastructure
- Deliver solutions created by the architecture team
- Build advanced hunting/custom detection rules
- Work with our clients to understand the maturity of their cyber security capabilities and help define strategies to become more cyber resilient
- Develop and implement custom security policies and procedures to minimize the risk of advanced cyber attacks
- Conduct technical security reviews, approval of suppliers and design and test documentation
- Collaborate closely with architects, designers, engineers, and other cross-functional team members within the organization to ensure that our solutions are built to the highest security standards
- Build a beneficial relationship with customers through presales and thought leadership activities
- Represent the company in a professional manner and enrich client relationships to Endava’s benefit
- Assist with security incident management and response activities
- Support the formulation of RFP responses and the more general bidding process
- Take a proactive role in identifying security risks, mitigations, and opportunities to strengthen Endava and our client’s resilience to cyber-attacks and security incidents

**Qualifications**
- **
Education & Certifications**
- Bachelor's degree in Computer Science, Engineering, Mathematics, or a related field (or equivalent professional experience).
- Relevant security certifications such as CISSP, CCSP, CISM, OSCP, CASP+, or AWS Certified Security Specialty are highly preferred.
- ** Experience & Expertise**
- 5+ years of experience in a senior information security role, delivering enterprise-level security in complex environments.
- Strong understanding of information security principles, techniques, and standards (e.g., NIST, CIS, ISO).
- Proven experience in security risk assessment, risk management, and security auditing.
- Experience with security operations, vulnerability management, and security testing, including scanning, identifying, resolving, and reporting risks.
- Hands-on expertise in Microsoft 365 Security, networking, and infrastructure security.
- ** Technical Skills**
- Strong scripting skills (Python, Shell, or similar).
- Experience with security tools such as IDS/IPS, SIEM, vulnerability scanners, and endpoint protection.
- Proficiency in automation tools (Ansible, Chef, Terraform) for security operations.
- Experience with containerization and orchestration systems (Docker, Kubernetes).
- ** Soft Skills & Additional Capabilities**
- Excellent communication and presentation skills, with the ability to engage both technical and non-technical stakeholders.
- Strong problem-solving abilities and capacity to work under pressure.
- Ability to stay up to date with emerging security technologies and assess their relevance for Endava client environments.
- Experience in formal documentation, including creating reports and security procedures.

**Additional Information**
Discover some of the global benefits that empower our people to become the best version of themselves:

- ** Finance**: Competitive salary package, share plan, company performance bonuses, value-based recognition awards, referral bonus;
- ** Career Development**: Career coaching, global career opportunities, non-linear career paths, internal development programmes for management and technical leadership;
- ** Learning Opportunities**:Complex projects, rotations, internal tech communities, training, certifications, coaching, online learning platforms subscriptions, pass-it-on sessions, workshops, conferences;
- ** Work-Life Balance**: Hybrid work and flexible working hours, employee assistance programme;
- ** Health**: Global internal wellbeing programme, access to wellbeing apps;
- ** Community**: Global internal tech communities, hobby clubs and interest groups, inclusion and diversity programmes, events and celebrations.