Cyber Security Consultant

About the role

DXC is looking for a collaborative Security Consultant to work directly with customers and help them mature their security capabilities, processes, governance models, and Secure‑by‑Design practices across projects and programmes. You will assess existing security approaches, pinpoint improvement opportunities and provide practical recommendations that strengthen security while supporting business and delivery goals.

Key responsibilities

• Support adoption and continuous improvement of Secure‑by‑Design practices in customer environments.
• Review existing security processes, operating models and governance arrangements with stakeholders.
• Identify opportunities to raise security maturity, efficiency and consistency across projects.
• Develop security standards, patterns, guidance and reusable controls.
• Ensure security requirements are integrated throughout solution design, delivery, testing and implementation.
• Design and review secure solutions for cloud, infrastructure, application and data environments.
• Conduct architecture and security reviews, produce risk‑based recommendations and maintain artefacts such as HLDs, LLDs, security patterns and threat models.
• Support assessments against frameworks like NIST 800‑53, ISO 27001 and NCSC CAF, and help close control gaps.
• Facilitate workshops, present findings to technical and non‑technical audiences and act as a trusted security advisor.

Required profile

• Strong collaboration and consultative skills, able to work with diverse customer stakeholders.
• Excellent communication skills to translate security requirements into pragmatic solutions.
• Ability to influence and guide both technical and business teams.
• Proactive mindset with a focus on delivering measurable security improvements.

Required skills

• NIST 800‑53 framework
• ISO 27001 standard
• NCSC CAF framework
• Secure‑by‑Design methodology
• Threat modelling techniques
• Cloud security architecture
• Infrastructure security design
• Application security principles
• Data security controls