Cybersecurity Consultant

Job not on LinkedIn

🔥 0 minutes ago

🌏 Anywhere in the World

⏱ Part Time

🟠 Senior

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Just posted.
• Jobs at this company usually fill in 52 days.
• No salary listed.

Apply Now

Find Similar Remote Jobs

Scopic

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2006

🏥 Healthcare

📣 Marketing

📦 Logistics

Healthcare • Marketing • Logistics

Scopic is a software development company specializing in custom software solutions, mobile and web development, AI consulting, and digital marketing services. With expertise in various technologies such as PHP, Node. js, and AWS, Scopic caters to diverse industries including healthcare, finance, and education. They focus on transforming client ideas into innovative applications while ensuring high-quality user experiences and effective marketing strategies.

📋 Description

• Run a security maturity assessment, review repositories, pipelines and cloud setup, and create a prioritized roadmap • Write core security policies and procedures covering access control, acceptable use, secure development, incident response, vendor usage and AI tool usage • Maintain the security backlog, risk register and progress metrics, and report monthly to management • Configure and enforce SSO and MFA across email, Git hosting, cloud consoles, CI/CD and Passbolt • Review and fix access rights and establish onboarding and offboarding checklists • Harden Passbolt and implement a secrets manager, including migrating secrets out of code and CI variables • Implement baseline hardening for laptops, cloud accounts, backups and logging • Write the incident response plan and run tabletop exercises • Build and roll out a Secure SDLC based on OWASP ASVS and OWASP SAMM • Configure and tune the SecOps platform, reduce false positives, establish pipeline quality gates and triage findings • Add SAST, SCA, secrets scanning, IaC scanning, container scanning, DAST and SBOM generation to CI/CD pipelines • Run threat modeling sessions and document results • Perform security code reviews of high-risk changes and help developers fix vulnerabilities • Conduct internal security testing before releases and coordinate external penetration tests • Map the EU Cyber Resilience Act, NIS2 and relevant local regulations to the company and clients • Implement vulnerability handling and disclosure processes, including support for clients’ CRA reporting obligations • Prepare for ISO/IEC 27001 certification through scope definition, risk assessment, Statement of Applicability, policies and evidence, and certification-body coordination • Help define security service tiers for client proposals • Complete client security questionnaires and build reusable answer sets • Join selected client meetings as a senior security voice • Work alongside the internal Security Lead and support their transition to day-to-day ownership • Run internal workshops on OWASP Top 10, threat modeling and secure CI/CD • Recommend training and certification paths for developers, Security Champions and DevOps engineers

🎯 Requirements

• 8+ years of experience in information security, with recent hands-on work in application security, DevSecOps or cloud security • Comfortable configuring security tools, writing pipeline configuration, reviewing code, testing applications and writing policies • Practical experience setting up a secure development lifecycle and integrating security tools into CI/CD pipelines • Good knowledge of cloud security in at least one major cloud: AWS, Azure or GCP • Ability to explain security risks in plain language to engineers and management • Fluent English, written and spoken • Kubernetes and container security experience • Knowledge of security risks in AI and LLM-based applications • Experience with the EU Cyber Resilience Act, NIS2 and GDPR in a software vendor or supplier context (nice to have) • Experience building security offerings for clients in an agency or outsourcing environment (nice to have) • Experience implementing or auditing ISO/IEC 27001 or a comparable framework such as SOC 2 (nice to have) • Hands-on certifications such as OSCP, BSCP, CDP or CKS (preferred) • ISO/IEC 27001 Lead Implementer or Lead Auditor certification (preferred) • Cloud security certification such as AWS Security Specialty, AZ-500 or Google Professional Cloud Security Engineer (preferred) • CISSP, CISM or CSSLP certification (preferred)

🏖️ Benefits

• Paid training and other professional opportunities • Latest technologies and knowledgeable colleagues • Flexible schedule and choice of preferred hours • Remote work from anywhere • Consistent flow of engaging, challenging work • Annual pay increases for good performance • Monthly payment via wire transfer for contractors

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume