Senior Security Consultant
New
J
JobgetherCybersecurity consulting
CanadaContractSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Languages
- Professional-level written and spoken English.
- Experience
- 5–7 years of hands-on experience in cybersecurity, information security, or technical security consulting
- Required Skills
- AWSKubernetesMicrosoft Azure
Requirements
- Have 5–7 years of hands-on experience in cybersecurity, information security, or technical security consulting.
- Have prior consulting or professional-services experience managing multiple external clients and leading security engagements independently.
- Bring deep, hands-on expertise in at least two of these domains: cloud security, application security, infrastructure security, and detection and response.
- For cloud security, have experience with AWS, GCP, or Azure, including IAM, cloud networking, security configurations, and infrastructure hardening.
- For application security, have knowledge of secure SDLC practices, threat modeling, code reviews, application vulnerabilities, and CI/CD security.
- For infrastructure security, have practical experience with Kubernetes, containers, infrastructure as code, and secrets management.
- For detection and response, have experience with EDR, SIEM, vulnerability management, security monitoring, and incident response.
- Have working knowledge of SOC 2 Type II and ISO 27001, including practical experience implementing technical security controls.
- Have strong technical writing and documentation skills to produce structured security reports and remediation recommendations.
- Have professional-level written and spoken English and confidence leading technical discussions with U.S.-based clients.
- Be able to work autonomously, manage competing priorities, and deliver across multiple client engagements.
- Relevant certifications such as CISSP, OSCP, or AWS Security Specialty are a plus.
Responsibilities
- Lead cloud security assessments across AWS, GCP, and Azure, including IAM, network security, configuration reviews, and infrastructure hardening.
- Conduct application security assessments covering secure SDLC reviews, threat modeling, code reviews, and CI/CD pipeline security.
- Assess and strengthen infrastructure security across Kubernetes, containers, infrastructure as code, and secrets management.
- Implement, configure, and manage EDR, SIEM, CSPM, and vulnerability scanning tools.
- Design and recommend security architectures, technical controls, and improvement roadmaps aligned with SOC 2, ISO 27001, and HIPAA requirements.
- Manage multiple client engagements, from project scoping and technical assessments through implementation and final delivery.
- Collaborate with engineering teams, technical specialists, and client stakeholders to communicate findings and drive security improvements.
- Lead client meetings, present technical recommendations, and translate security issues into actionable remediation plans.
- Produce technical reports, security assessments, architecture documentation, and implementation guidelines.
View Full Description & ApplyYou'll be redirected to the employer's site
