Cybersecurity Consultant
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Part-time remote cybersecurity consultant securing Scopic’s software delivery, cloud environments and compliance. Building Secure SDLC practices and mentoring the internal Security Lead.
Responsibilities:
- Run a security maturity assessment, review repositories, pipelines and cloud setup, and create a prioritized roadmap
- Write core security policies and procedures covering access control, acceptable use, secure development, incident response, vendor usage and AI tool usage
- Maintain the security backlog, risk register and progress metrics, and report monthly to management
- Configure and enforce SSO and MFA across email, Git hosting, cloud consoles, CI/CD and Passbolt
- Review and fix access rights and establish onboarding and offboarding checklists
- Harden Passbolt and implement a secrets manager, including migrating secrets out of code and CI variables
- Implement baseline hardening for laptops, cloud accounts, backups and logging
- Write the incident response plan and run tabletop exercises
- Build and roll out a Secure SDLC based on OWASP ASVS and OWASP SAMM
- Configure and tune the SecOps platform, reduce false positives, establish pipeline quality gates and triage findings
- Add SAST, SCA, secrets scanning, IaC scanning, container scanning, DAST and SBOM generation to CI/CD pipelines
- Run threat modeling sessions and document results
- Perform security code reviews of high-risk changes and help developers fix vulnerabilities
- Conduct internal security testing before releases and coordinate external penetration tests
- Map the EU Cyber Resilience Act, NIS2 and relevant local regulations to the company and clients
- Implement vulnerability handling and disclosure processes, including support for clients’ CRA reporting obligations
- Prepare for ISO/IEC 27001 certification through scope definition, risk assessment, Statement of Applicability, policies and evidence, and certification-body coordination
- Help define security service tiers for client proposals
- Complete client security questionnaires and build reusable answer sets
- Join selected client meetings as a senior security voice
- Work alongside the internal Security Lead and support their transition to day-to-day ownership
- Run internal workshops on OWASP Top 10, threat modeling and secure CI/CD
- Recommend training and certification paths for developers, Security Champions and DevOps engineers
Requirements:
- 8+ years of experience in information security, with recent hands-on work in application security, DevSecOps or cloud security
- Comfortable configuring security tools, writing pipeline configuration, reviewing code, testing applications and writing policies
- Practical experience setting up a secure development lifecycle and integrating security tools into CI/CD pipelines
- Good knowledge of cloud security in at least one major cloud: AWS, Azure or GCP
- Ability to explain security risks in plain language to engineers and management
- Fluent English, written and spoken
- Kubernetes and container security experience
- Knowledge of security risks in AI and LLM-based applications
- Experience with the EU Cyber Resilience Act, NIS2 and GDPR in a software vendor or supplier context (nice to have)
- Experience building security offerings for clients in an agency or outsourcing environment (nice to have)
- Experience implementing or auditing ISO/IEC 27001 or a comparable framework such as SOC 2 (nice to have)
- Hands-on certifications such as OSCP, BSCP, CDP or CKS (preferred)
- ISO/IEC 27001 Lead Implementer or Lead Auditor certification (preferred)
- Cloud security certification such as AWS Security Specialty, AZ-500 or Google Professional Cloud Security Engineer (preferred)
- CISSP, CISM or CSSLP certification (preferred)
Benefits:
- Paid training and other professional opportunities
- Latest technologies and knowledgeable colleagues
- Flexible schedule and choice of preferred hours
- Remote work from anywhere
- Consistent flow of engaging, challenging work
- Annual pay increases for good performance
- Monthly payment via wire transfer for contractors
Similar Jobs
Security Engineer
Security Engineer securing Noxtua’s sovereign Legal AI cloud infrastructure, GPU systems, and AI workloads. Building DevSecOps controls and supporting ISO 27001, BSI C5, and TISAX compliance.
Senior Security Engineer
Senior Security Engineer protecting Technosylva’s cloud-hosted platform through cloud, AI, vulnerability, and incident security. Automating controls and advising infrastructure, platform, and IT teams.
Senior Strategic Security Advisor
Senior cybersecurity advisor guiding regulated organizations through CMMC, risk, and compliance. CIT delivers managed IT, cybersecurity, cloud, and custom technology solutions.
Senior Security Engineer – Identity & Endpoint
Senior Security Engineer designing identity, endpoint, and device-trust controls for Fortellar’s enterprise IT consulting clients. Leading high-risk Microsoft security remediation and change programs.
Offensive Cybersecurity Engineer – RL Environments for AI Evaluation
Offensive cybersecurity engineers building and hardening reinforcement-learning environments. Evaluating frontier AI models for Terac, a platform connecting vetted experts with AI researchers and labs.
Senior System & Information Security Administrator
Senior administrator owning global servers, networks, security, backups, and end-user support. Coordinating external IT providers for a Bulgaria-based company.
Cybersecurity & Information Assurance Specialist – Federal Health IT
Cybersecurity specialist maintaining DoD information assurance records and security compliance. Supporting federal healthcare technology readiness through STIG, ACAS, eMASS, and access reviews.
Information Security System Specialist – ATO Lead
ATO Lead preparing VA records application authority-to-operate packages under the Risk Management Framework. Supporting security controls, continuous monitoring, remediation, and Zero Trust governance remotely.
Chartered or Principal Enterprise Advisor – Security Architecture
Security architecture advisor assuring cloud, hybrid and on-premises environments for Intelance, a UK cybersecurity and advisory firm. Delivering threat models, design reviews and client-ready assurance reports.
Senior Baseline Security Engineer, CIS, STIGs
Senior security engineer building and validating CIS/STIG baselines for phia’s federal cybersecurity clients. Mapping configurations to NIST, FISMA, and agency security controls.
Senior Security Architect
Senior Security Architect advancing First Hawaiian Bank’s enterprise security architecture. Securing hybrid cloud, on-premises, and AI/ML technologies while supporting regulatory compliance.
Staff Security Engineer – Enterprise Security
Staff Security Engineer securing ServiceNow’s AI-powered enterprise SaaS platform across cloud, on-premises, and isolated infrastructure. Supporting Protected B workloads and Canadian government compliance.
Director of Security, Risk
Director leading security governance, compliance, and risk programs at SentiLink, which verifies identities and flags fraud. Owning FedRAMP, SOC 2, PCI DSS, and third-party risk.
Vulnerability Management Engineer, Security Assessment – Qualys VMDR
Vulnerability engineer operating Qualys VMDR, security assessments, and remediation tracking. Supporting Gruve’s enterprise cybersecurity and cloud infrastructure services through global 24x7 operations.
Senior Cloud Security Engineer
Senior Cloud Security Engineer owning AWS security for Erbis’s enterprise supply-chain and shipment platform. Leading detection, incident response, identity, compliance, and AI-assisted security operations.
Information Security Consultant
Information Security Consultant delivering GRC engagements, risk assessments and vCISO advisory. Helping Cognisys clients strengthen security programmes and achieve compliance certifications.
Senior Cybersecurity IAM Engineer
Senior IAM Engineer managing identity, access, authentication, and entitlement systems for Louisiana Blue, a health insurer. Designing secure IAM architecture, integrations, and controls.
Product Security Engineer
Product Security Engineer securing Superhuman’s AI productivity platform, products, and AI agents. Building secure-by-default tooling, guardrails, and product security practices.
IT Lead – Security
IT and cybersecurity lead owning systems, support, hardware, and security for Frontline’s remote wildfire-defense technology company. Building IT operations and SOC 2 readiness as its first dedicated IT professional.
Senior Director, Product Security
Senior Director leading application, privacy, device, and research security at 1Password. Building secure access solutions for over 180,000 businesses.