Cybersecurity Consultant

Scopic

. Run a security maturity assessment, review repositories, pipelines and cloud setup, and create a prioritized roadmap .

Posted 11/10/2026part-timeRemoteSeniorLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in information security with a focus on application security, DevSecOps, and cloud security. Proficient in configuring security tools, implementing secure development lifecycles, and ensuring compliance with relevant regulations such as ISO/IEC 27001 and the EU Cyber Resilience Act.

Highest-signal resume keywords

Information Security ExperienceSecure Development Lifecycle ImplementationCloud Security Knowledge (AWS, Azure, GCP)ISO/IEC 27001 Certification ExperienceSecurity Tool Configuration

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Application SecurityDevSecOpsCloud SecuritySecurity Policy WritingIncident Response PlanningVulnerability ManagementSecurity Code ReviewThreat ModelingCI/CD Pipeline SecurityAccess Control Management

Soft Skills

Communication SkillsCollaborationTraining and Mentoring

Tools & Technologies

SSOMFAKubernetesPassboltSecOps PlatformOWASP ASVSOWASP SAMMSASTDASTCI/CD Tools

Certifications & Qualifications

OSCPBSCPCDPCKSISO/IEC 27001 Lead ImplementerISO/IEC 27001 Lead AuditorAWS Security SpecialtyAZ-500Google Professional Cloud Security EngineerCISSP

Industry Keywords

EU Cyber Resilience ActNIS2GDPRSecurity Maturity AssessmentRisk RegisterIncident ResponseVendor ManagementSecurity BacklogClient Security OfferingsSecurity Training

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformKubernetesSDLC

About the role

Key responsibilities & impact

Run a security maturity assessment, review repositories, pipelines and cloud setup, and create a prioritized roadmap
Write core security policies and procedures covering access control, acceptable use, secure development, incident response, vendor usage and AI tool usage
Maintain the security backlog, risk register and progress metrics, and report monthly to management
Configure and enforce SSO and MFA across email, Git hosting, cloud consoles, CI/CD and Passbolt
Review and fix access rights and establish onboarding and offboarding checklists
Harden Passbolt and implement a secrets manager, including migrating secrets out of code and CI variables
Implement baseline hardening for laptops, cloud accounts, backups and logging
Write the incident response plan and run tabletop exercises
Build and roll out a Secure SDLC based on OWASP ASVS and OWASP SAMM
Configure and tune the SecOps platform, reduce false positives, establish pipeline quality gates and triage findings
Add SAST, SCA, secrets scanning, IaC scanning, container scanning, DAST and SBOM generation to CI/CD pipelines
Run threat modeling sessions and document results
Perform security code reviews of high-risk changes and help developers fix vulnerabilities
Conduct internal security testing before releases and coordinate external penetration tests
Map the EU Cyber Resilience Act, NIS2 and relevant local regulations to the company and clients
Implement vulnerability handling and disclosure processes, including support for clients’ CRA reporting obligations
Prepare for ISO/IEC 27001 certification through scope definition, risk assessment, Statement of Applicability, policies and evidence, and certification-body coordination
Help define security service tiers for client proposals
Complete client security questionnaires and build reusable answer sets
Join selected client meetings as a senior security voice
Work alongside the internal Security Lead and support their transition to day-to-day ownership
Run internal workshops on OWASP Top 10, threat modeling and secure CI/CD
Recommend training and certification paths for developers, Security Champions and DevOps engineers

Requirements

What you’ll need

8+ years of experience in information security, with recent hands-on work in application security, DevSecOps or cloud security
Comfortable configuring security tools, writing pipeline configuration, reviewing code, testing applications and writing policies
Practical experience setting up a secure development lifecycle and integrating security tools into CI/CD pipelines
Good knowledge of cloud security in at least one major cloud: AWS, Azure or GCP
Ability to explain security risks in plain language to engineers and management
Fluent English, written and spoken
Kubernetes and container security experience
Knowledge of security risks in AI and LLM-based applications
Experience with the EU Cyber Resilience Act, NIS2 and GDPR in a software vendor or supplier context (nice to have)
Experience building security offerings for clients in an agency or outsourcing environment (nice to have)
Experience implementing or auditing ISO/IEC 27001 or a comparable framework such as SOC 2 (nice to have)
Hands-on certifications such as OSCP, BSCP, CDP or CKS (preferred)
ISO/IEC 27001 Lead Implementer or Lead Auditor certification (preferred)
Cloud security certification such as AWS Security Specialty, AZ-500 or Google Professional Cloud Security Engineer (preferred)
CISSP, CISM or CSSLP certification (preferred)

Benefits

Comp & perks

Paid training and other professional opportunities
Latest technologies and knowledgeable colleagues
Flexible schedule and choice of preferred hours
Remote work from anywhere
Consistent flow of engaging, challenging work
Annual pay increases for good performance
Monthly payment via wire transfer for contractors