Fractional Security Engineer: ISO 27001 & Cloud IAM Expert

airlock - governance for MCP, skills, agents; Belgique; Híbrido; EUR 148.000 - 203.000; Tempo parcial

Resumo da vaga

airlock is seeking a fractional Security Engineer to fortify our security foundations from a hands-on perspective. This first dedicated security role works with founders and our compliance partner, not as a pure advisory function.

The role is 1 day per week, Belgium-based with remote-friendly options, and reports to the Founders. The successful candidate will drive ISO 27001 readiness, review identity and access controls, audit tenant isolation, and scope the first independent pen test.

Qualificações

• Hands-on ISO 27001 experience.
• Strong AWS security knowledge, especially IAM and KMS.
• Comfortable with OAuth 2.0 and OpenID Connect.
• Able to read infrastructure-as-code.
• Able to work independently in a small team.

Responsabilidades

• Get us ready for ISO 27001 certification.
• Review our identity and authorization surface.
• Check tenant isolation and key security assumptions.
• Scope and coordinate our first independent penetration test.
• Triage security findings and benchmark drift.
• Run recurring ISMS controls and access reviews.
• Support security questionnaires and selected customer security calls.
• Help us improve our security posture as the platform grows.
• AI-agent security, MCP-specific threat modeling (plus topics: network controls, BYOK, SOC 2 readiness, DORA readiness).

Conhecimentos

Security engineering

ISO 27001

AWS IAM

AWS KMS

OAuth 2.0

OpenID Connect

Infrastructure as code

Independent work

AI-agent security

SOC 2 readiness

DORA readiness

Descrição da vaga

airlock is seeking a fractional Security Engineer to fortify our security foundations from a hands-on perspective. This first dedicated security role works with founders and our compliance partner, not as a pure advisory function.

The role is 1 day per week, Belgium-based with remote-friendly options, and reports to the Founders. The successful candidate will drive ISO 27001 readiness, review identity and access controls, audit tenant isolation, and scope the first independent pen test.