Senior Security Consultant

Accountabilities:

Lead cloud security assessments across AWS, GCP, and Azure, covering identity and access management (IAM), network security, configuration reviews, and infrastructure hardening.
Conduct application security assessments, including secure software development lifecycle (SDLC) reviews, threat modeling, code reviews, and CI/CD pipeline security evaluations.
Assess and strengthen infrastructure security across Kubernetes, containerized environments, infrastructure as code (IaC), and secrets management.
Implement, configure, and manage security solutions, including Endpoint Detection and Response (EDR), Security Information and Event Management (SIEM), Cloud Security Posture Management (CSPM), and vulnerability scanning tools.
Design and recommend security architectures, technical controls, and improvement roadmaps aligned with SOC 2, ISO 27001, and HIPAA requirements.
Independently manage multiple client engagements, taking ownership of project scoping, technical assessments, implementation activities, and final delivery.
Collaborate directly with engineering teams, technical specialists, and client stakeholders to communicate findings and drive security improvements.
Lead client meetings, present technical recommendations, and translate complex security issues into clear, actionable remediation plans.
Produce comprehensive technical reports, security assessments, architecture documentation, and implementation guidelines.
Requirements:
5–7 years of hands-on experience in cybersecurity, information security, or technical security consulting, with a strong track record of delivering technical projects.
Mandatory previous experience in consulting or professional services, including independently managing multiple external clients and leading security engagements.
Deep, hands-on technical expertise in at least two of the following domains:
Cloud Security: Experience with AWS, GCP, or Azure, including IAM, cloud networking, security configurations, and infrastructure hardening.
Application Security: Knowledge of secure SDLC practices, threat modeling, code reviews, application vulnerabilities, and CI/CD security.
Infrastructure Security: Practical experience with Kubernetes, containers, infrastructure as code (IaC), and secrets management.
Detection and Response: Experience with EDR, SIEM, vulnerability management, security monitoring, and incident response.
Working knowledge of SOC 2 Type II and ISO 27001, including practical experience implementing technical security controls.
Strong technical writing and documentation skills, with the ability to produce clear, structured security reports and remediation recommendations.
Excellent communication and stakeholder management abilities, with professional-level written and spoken English.
Confidence leading technical discussions and collaborating daily with U.S.-based clients.
Ability to work autonomously, manage competing priorities, and deliver high-quality results across multiple client engagements.
Nice to Have:
Relevant industry certifications such as CISSP, OSCP, AWS Security Specialty, or equivalent qualifications.
Proven experience leading end-to-end security consulting engagements, from initial assessment and scoping through implementation and final delivery.
Benefits:
Full-time, long-term independent contractor opportunity.
100% remote work arrangement, with preference for candidates based in the United States.
40-hour working week.
Opportunity to work on diverse technical cybersecurity projects across multiple client environments.
Direct exposure to engineering teams, technical decision-makers, and client stakeholders.
Significant autonomy and ownership of security engagements from assessment through delivery.
Opportunity to strengthen expertise across cloud, application, infrastructure, and enterprise security.
Professional growth through exposure to complex security challenges, modern technologies, and industry best practices.