Security Consultant

XCofinite; Calgary; Hybrid; CAD 90,000 - 130,000; Full time

Job summary

XCofinite is seeking a security consultant to run assessments against CIS and NIST CSF, help clients remediate the critical gaps, and stand up recurring vulnerability management programs.

The role focuses on framework-led engagements, not product sales, and requires experience in security assessments, cloud security, and producing executive-ready reports for leadership teams.

Qualifications

• 4+ years in security consulting, assessment, or operations.
• Working knowledge of a major cloud provider's security services.
• One or more of: CISSP, CCSP, GIAC, ISO 27001 Lead Auditor.
• Clear writer; your reports get read by executives.

Responsibilities

• Deliver security assessments and ranked remediation plans
• Support identity, logging, and backup hardening sprints
• Facilitate tabletop exercises and incident response planning
• Guide SOC 2 and ISO 27001 readiness engagements

Skills

Security consulting

Vulnerability management

Report writing

Executive communication

Education

CISSP

CCSP

GIAC

ISO 27001 Lead Auditor

Tools

Cloud security services

Job description

Run assessments against CIS and NIST CSF, help clients remediate the critical few, and stand up recurring vulnerability management. Independent, framework-led, no product sales targets.

• Deliver security assessments and ranked remediation plans
• Support identity, logging, and backup hardening sprints
• Facilitate tabletop exercises and incident response planning
• Guide SOC 2 and ISO 27001 readiness engagements

What we're looking for

• 4+ years in security consulting, assessment, or operations
• Working knowledge of a major cloud provider's security services
• One or more of: CISSP, CCSP, GIAC, ISO 27001 Lead Auditor
• Clear writer; your reports get read by executives