Remote Cybersecurity Consultant for ISO 27001 & Secure SDLC

Jobgether; Austria; Remote; EUR 83,000 - 165,000; Part time

Job summary

Jobgether seeks a Cybersecurity Consultant based in Austria to strengthen security across software projects, implement secure development practices, and prepare for ISO/IEC 27001 certification in a part-time, fully remote role.

The role involves assessing controls, configuring SSO/MFA, enhancing Passbolt security, and integrating security tools into CI/CD pipelines while mentoring the internal security lead in a dynamic, international software environment.

Qualifications

• At least 8 years of professional experience in information security.
• Hands-on experience in application security, DevSecOps, or cloud security.
• Ability to independently configure security tools and write pipeline configurations.
• Experience designing Secure SDLC and integrating security tools into CI/CD pipelines.
• Strong knowledge of cloud platforms AWS, Azure, or GCP.
• Experience with Kubernetes and container security.
• Experience leading ISO/IEC 27001 preparation and regulatory considerations.
• Collaborate with engineering teams and mentor others.

Responsibilities

• Conduct security maturity assessments using OWASP SAMM and review repositories, pipelines, and cloud environments.
• Translate assessment findings into prioritized security roadmaps.
• Develop and maintain security policies covering access control, acceptable use, secure development, incident response, vendor management, and AI tool usage.
• Maintain security backlogs, risk registers, and monthly progress reports to management.
• Configure and enforce SSO and MFA across email, Git hosting, cloud platforms, CI/CD systems, and Passbolt.
• Review access permissions and establish onboarding/offboarding procedures.
• Strengthen Passbolt security and implement secrets management for apps and pipelines.
• Implement baseline security measures for employees’ devices, cloud accounts, backups, and logging.
• Develop incident response procedures and run tabletop exercises with the team.
• Design and implement Secure SDLC based on OWASP ASVS and OWASP SAMM.
• Roll out secure development practices across client projects.
• Configure SecOps platform, reduce false positives, and coordinate vulnerability triage.
• Integrate security scanning tools into CI/CD pipelines (SAST, SCA, secrets scanning, IaC, container scanning, DAST, SBOM).
• Lead threat modeling sessions and document findings.
• Conduct security code reviews and assist developers in fixing vulnerabilities.
• Perform internal security testing and coordinate external penetration testing.

Skills

Information security

Application security

DevSecOps

Cloud security

Kubernetes

Container security

Security tooling

CI/CD security

Tools

SAST

SCA

Secrets scanning

IaC tooling

Passbolt

CI/CD tools

Job description

Jobgether seeks a Cybersecurity Consultant based in Austria to strengthen security across software projects, implement secure development practices, and prepare for ISO/IEC 27001 certification in a part-time, fully remote role.

The role involves assessing controls, configuring SSO/MFA, enhancing Passbolt security, and integrating security tools into CI/CD pipelines while mentoring the internal security lead in a dynamic, international software environment.