Cybersecurity Consultant

Jobgether; Ireland; Remote; EUR 83,000 - 138,000; Part time

Benefits offered by this job

Fully remote

Part-time

Flexible hours

Hourly pay

Wire payments

Training opportunities

Modern tech stack

International team

Job summary

Jobgether is seeking a part-time Cybersecurity Consultant to strengthen security across software projects in a fully remote, international environment. You will lead secure development practices, implement IAM controls, and coordinate vulnerability management while mentoring the internal Security Lead.

The role emphasizes hands-on security engineering, policy development, and preparation for ISO/IEC 27001 certification, with flexible scheduling and a global workload.

Qualifications

• 8+ years in information security with hands-on app security, DevSecOps, or cloud security.
• Ability to configure security tools, write pipeline configs, review code, and write security policies.
• Experience implementing Secure SDLC and integrating security tools into CI/CD.
• Strong knowledge of cloud security on AWS, Azure, or GCP.
• Experience with Kubernetes and container security.
• Understanding of security risks in AI and LLM apps.
• Ability to communicate complex security concepts to engineers and management.
• Fluency in written and spoken English.

Responsibilities

• Conduct security maturity assessments using OWASP SAMM.
• Translate findings into prioritized security roadmaps.
• Develop and maintain security policies covering access control and incident response.
• Maintain security backlogs, risk registers, and monthly progress reports.
• Configure SSO and MFA across email, Git hosting, cloud, CI/CD, and Passbolt.
• Review access permissions and onboarding/offboarding procedures.
• Strengthen Passbolt security and manage secrets across apps and pipelines.
• Implement baseline security for devices, cloud accounts, backups, logging.
• Develop incident response procedures and tabletop exercises.
• Design Secure SDLC based on OWASP ASVS/SAMM.
• Roll out secure practices across client projects.
• Configure SecOps platform; reduce false positives; set quality gates.
• Integrate SAST, SCA, secrets scanning, IaC, container scanning, DAST, SBOM.
• Lead threat modeling sessions and document findings.
• Conduct security code reviews and assist developers.
• Perform internal security testing and coordinate external pen tests.
• Assess CRA/NIS2/GDPR impact on operations.
• Establish vulnerability handling and client CRA reporting support.
• Lead ISO/IEC 27001 preparation activities.
• Coordinate with certification body.

Skills

Information security

Application security

DevSecOps

Cloud security

CI/CD security

Kubernetes

Container security

Security tooling

English fluency

Tools

Security tools

CI/CD tooling

Passbolt

Job description

The Cybersecurity Consultant will play a hands-on role in strengthening organizational security and embedding secure development practices across software projects. You will assess existing security controls, identify vulnerabilities, and implement practical improvements across repositories, cloud environments, and CI/CD pipelines. Working closely with engineering teams, you will configure security tools, establish policies, conduct security reviews, and support regulatory compliance initiatives. A key priority will be preparing the organization for ISO/IEC 27001 certification while building a sustainable security framework. You will also mentor an internal Security Lead and help developers adopt security best practices. This is a part-time, fully remote opportunity offering significant flexibility and the chance to shape security operations within an international software environment.

Accountabilities

• Security assessment and governance:

  • Conduct security maturity assessments using frameworks such as OWASP SAMM, reviewing repositories, development pipelines, and cloud environments.
  • Translate assessment findings into prioritized security roadmaps.
  • Develop and maintain security policies and procedures covering access control, acceptable use, secure development, incident response, vendor management, and AI tool usage.
  • Maintain security backlogs, risk registers, and performance metrics, providing monthly progress reports to management.

• Organizational security and infrastructure:

  • Configure and enforce Single Sign-On (SSO) and Multi-Factor Authentication (MFA) across email, Git hosting, cloud platforms, CI/CD systems, and Passbolt.
  • Review and improve access permissions while establishing onboarding and offboarding procedures.
  • Strengthen Passbolt security and implement secrets management solutions for applications and pipelines, migrating existing secrets from source code and CI variables.
  • Implement baseline security measures for employee devices, cloud accounts, backups, and logging systems.
  • Develop incident response procedures and organize tabletop exercises with the team.

• Secure software development:

  • Design and implement a standardized Secure Software Development Lifecycle (Secure SDLC) based on OWASP ASVS and OWASP SAMM.
  • Roll out secure development practices across active client projects.
  • Configure and optimize the SecOps platform, reduce false positives, establish pipeline quality gates, and coordinate vulnerability triage.
  • Integrate security scanning tools into CI/CD pipelines, including SAST, SCA, secrets scanning, Infrastructure as Code (IaC), container scanning, DAST, and SBOM generation.
  • Lead threat modeling sessions and document findings for active projects.
  • Conduct security code reviews of high-risk changes and support developers in resolving vulnerabilities.
  • Perform internal application security testing before releases and coordinate external penetration testing activities.

• Regulatory compliance and certification:

  • Assess the impact of the EU Cyber Resilience Act (CRA), NIS2, and relevant local regulations on internal operations and client projects.
  • Establish vulnerability handling and disclosure processes, including support for client CRA reporting obligations.
  • Lead hands-on ISO/IEC 27001 preparation activities, including defining scope, conducting risk assessments, preparing the Statement of Applicability, developing policies, and collecting compliance evidence.
  • Coordinate with the relevant certification body throughout the preparation process.

• Client security services:

  • Help define security service packages and tiers for inclusion in client proposals.
  • Complete client security questionnaires and develop reusable responses.
  • Participate in selected client meetings and discussions, providing senior-level cybersecurity expertise.

• Team development and knowledge sharing:

  • Work closely with the internal Security Lead, transferring knowledge and supporting their gradual ownership of daily security operations.
  • Organize internal workshops covering topics such as OWASP Top 10, threat modeling, and secure CI/CD practices.
  • Recommend relevant training programs and certification pathways for developers, Security Champions, and DevOps engineers.

Requirements

The ideal candidate brings extensive cybersecurity experience and a strong technical background in application security, DevSecOps, and cloud security. This position requires someone who can independently implement security solutions while communicating effectively with both technical teams and management. The following qualifications are expected:

• At least 8 years of professional experience in information security, including recent hands-on experience in application security, DevSecOps, or cloud security.
• Proven ability to independently configure security tools, write pipeline configurations, review source code, test applications, and develop security policies.
• Practical experience designing and implementing Secure Software Development Lifecycle processes and integrating security tools into CI/CD pipelines.
• Strong knowledge of cloud security across at least one major cloud platform: AWS, Azure, or Google Cloud Platform (GCP).
• Experience with Kubernetes and container security.
• Understanding of security risks associated with AI and Large Language Model (LLM)-based applications.
• Ability to communicate complex security concepts and risks clearly to both engineering teams and management.
• Fluency in written and spoken English.

Additional Qualifications (Preferred)

• Experience with the EU Cyber Resilience Act (CRA), NIS2, and GDPR, particularly within software development, vendor, or supplier environments.
• Experience developing cybersecurity service offerings for clients in an agency, consulting, or outsourcing environment.
• Previous experience implementing or auditing ISO/IEC 27001 or comparable frameworks such as SOC 2.

Preferred Certifications

• Offensive security and technical certifications: OSCP, BSCP, CDP, or CKS.
• ISO/IEC 27001 Lead Implementer or Lead Auditor.
• Cloud security certifications, such as AWS Security Specialty, AZ-500, or Google Professional Cloud Security Engineer.
• CISSP, CISM, or CSSLP.

Benefits

• Fully remote working arrangement, with the flexibility to work from anywhere with a stable internet connection.
• Part-time position with flexible working hours and the freedom to choose your preferred time zone and schedule.
• Negotiable hourly compensation based on skills and professional experience.
• Monthly payments via wire transfer for contractors.
• Paid training and professional development opportunities.
• Access to modern technologies and opportunities to work on innovative projects.
• Consistent workload with a steady flow of engaging and challenging assignments.
• Annual compensation increases based on performance.
• Opportunity to collaborate with an international team of experienced professionals.