Remote Cybersecurity Consultant: ISO 27001 & Secure SDLC

Consult; United Kingdom; Remote; GBP 83,000 - 165,000; Part time

Benefits offered by this job

Fully remote work

Part-time with flexible hours

Competitive hourly compensation

Training and professional development

International project exposure

Annual pay increases

Contractor payments via wire transfer

Job summary

Consult is seeking a Cybersecurity Consultant for a fully remote, part-time role based in the United Kingdom. The candidate will strengthen security, embed secure development practices, and prepare for ISO/IEC 27001 certification while guiding developers and teams across software projects.

You will assess controls, implement improvements in repositories, cloud environments, and CI/CD pipelines, configure SSO/MFA, enhance Passbolt security, and help drive regulatory compliance initiatives in an

Qualifications

• At least 8 years in information security, including hands-on app security, DevSecOps, or cloud security.

Responsibilities

• Conduct security assessments and governance using frameworks like OWASP SAMM.
• Translate findings into prioritized roadmaps and develop security policies.
• Configure SSO/MFA across email, Git hosting, cloud, CI/CD, and Passbolt.
• Strengthen Passbolt security and migrate secrets from source code/CI variables.
• Design an SDLC framework based on OWASP ASVS and SAMM and rollout secure development across client projects.
• Integrate security tools into CI/CD (SAST, SCA, secrets scanning, IaC, container scanning, DAST, SBOM).
• Lead threat modeling and perform security code reviews and internal pen tests.

Skills

Security tool configuration

CI/CD security

Cloud security (AWS/Azure/GCP)

Kubernetes security

Secure SDLC / ASVS/SAMM

Regulatory compliance (CRA,NIS2,GDPR)

ISO/IEC 27001

Mentoring / team leadership

Fluent English

Tools

Passbolt

Secrets management tools

Job description

Consult is seeking a Cybersecurity Consultant for a fully remote, part-time role based in the United Kingdom. The candidate will strengthen security, embed secure development practices, and prepare for ISO/IEC 27001 certification while guiding developers and teams across software projects.

You will assess controls, implement improvements in repositories, cloud environments, and CI/CD pipelines, configure SSO/MFA, enhance Passbolt security, and help drive regulatory compliance initiatives in an