Remote Cybersecurity Consultant

Remote, Worldwide

Category: IT Services

Location:

This is a hands-on role. We are not looking for someone to only advise us and leave the work to our team: you will do a large part of the security work yourself, working inside our repositories, pipelines and cloud accounts alongside our engineers. You will configure tools, fix and harden things, write the processes and documents, and run the sessions, while showing our team how it is done along the way.

Our goal is a company that runs a secure development lifecycle on every project, has its own house in order, is well on the way to ISO/IEC 27001 certification, and has an internal Security Lead who can work with you and gradually take over day-to-day ownership. This is a part-time role.

Responsibilities

Assessment and governance

Run the security maturity assessment yourself (for example OWASP SAMM), review our repositories, pipelines and cloud setup, and turn the findings into a prioritized roadmap.

Write our core security policies and procedures: access control, acceptable use, secure development, incident response, vendor and AI tool usage.

Set up and maintain the security backlog, risk register and progress metrics, and report progress to...