Cybersecurity Consultant

Source Group International; Zürich; Hybrid; CHF 185,000 - 258,000; Part time

Job summary

Source Group International is seeking an experienced Cybersecurity Consultant to strengthen security post-incident posture for a Swiss SaaS company. The role involves hands-on security work with engineering teams across cloud and application layers, including identity, API security, and compliance.

The engagement is hybrid (Zug) with remote work and on-site presence as needed, lasting 6–8 weeks with 2–3 days per week workload.

Qualifications

• 5+ years of information security experience.
• Experience with cloud security and identity.
• Knowledge of OAuth2, OIDC, SAML and JWT.

Responsibilities

• Review incident analysis, remediation activities, and remaining gaps.
• Conduct a security assessment of the platform and cloud environment.
• Evaluate authentication mechanisms and partner SSO integrations.
• Review API security, secrets management, logging and monitoring.
• Assess Azure services including PostgreSQL, Redis, Storage, Defender.
• Coordinate external penetration testing activities.
• Support responses to customer security questionnaires and audits.
• Advise on ISO 27001, NIST CSF, data residency and audit rights.
• Develop a roadmap toward ISO 27001 readiness.

Skills

Azure Cloud Security

Microsoft Entra ID (Azure AD)

OAuth2 / OIDC / SAML / JWT

Web & SaaS security

API security

Incident response

Job description

Immediate Opportunity for an Experienced Cybersecurity Consultant

We are supporting an innovative Swiss SaaS company that is looking for a seasoned cybersecurity professional to strengthen its security posture following a recently contained security incident related to a partner SSO integration.

This is an ideal engagement for a hands-on Security Consultant, Security Architect, Cloud Security Specialist, or fractional CISO who enjoys working closely with engineering teams and driving pragmatic security improvements.

Location:Zug (Hybrid)
Remote with occasional on-site presence
Start: ASAP
Duration: 6-8 weeks initially
Workload: 2-3 days per week

What You'll Do

• Review incident analysis, remediation activities, and remaining security gaps
• Conduct a security assessment of the platform and cloud environment
• Evaluate authentication and authorization mechanisms, including OAuth2, OIDC, SAML, JWT, MFA, and partner SSO integrations
• Review API security, secrets management, logging, monitoring, alerting, and cloud security controls
• Assess Azure services including PostgreSQL, Redis, Storage, Private Endpoints, and Defender
• Define and coordinate external penetration testing activities
• Support responses to customer security questionnaires and audits
• Advise on requirements related to ISO 27001, NIST CSF, data residency, audit logging, backup and recovery testing, and customer audit rights
• Develop and prioritize a roadmap toward ISO 27001 readiness

Required Experience

5+ years of experience in Information Security

Strong hands-on experience with:

• Azure Cloud Security
• Microsoft Entra ID (Azure AD)
• OAuth2, OpenID Connect (OIDC), SAML, JWT
• Web and SaaS application security
• API security
• Incident response and remediation

Experience with:

• ISO 27001 implementation and/or auditing
• Security assessments and customer compliance requirements
• GDPR and Swiss Data Protection Act (nDSG)

Comfortable working directly with engineering teams in a fast-paced environment

Nice to Have

• CISSP
• CISM
• OSCP
• ISO 27001 Lead Implementer
• ISO 27001 Lead Auditor

Ideal Background

We are particularly interested in professionals who have worked as:

• Security Architect
• Cloud Security Consultant
• Information Security Consultant
• vCISO / Fractional CISO
• Application Security Consultant
• Azure Security Specialist

Experience supporting public sector, transportation, industrial, or regulated customers is highly beneficial.