Remote Cybersecurity Consultant — ISO 27001 & Secure SDLC

Jobgether; Irland; Remote; EUR 83.000 - 138.000; Teilzeit

Benefits dieser Stelle

Fully remote

Part-time

Flexible hours

Hourly pay

Wire payments

Training opportunities

Modern tech stack

International team

Zusammenfassung

Jobgether is seeking a part-time Cybersecurity Consultant to strengthen security across software projects in a fully remote, international environment. You will lead secure development practices, implement IAM controls, and coordinate vulnerability management while mentoring the internal Security Lead.

The role emphasizes hands-on security engineering, policy development, and preparation for ISO/IEC 27001 certification, with flexible scheduling and a global workload.

Qualifikationen

• 8+ years in information security with hands-on app security, DevSecOps, or cloud security.
• Ability to configure security tools, write pipeline configs, review code, and write security policies.
• Experience implementing Secure SDLC and integrating security tools into CI/CD.
• Strong knowledge of cloud security on AWS, Azure, or GCP.
• Experience with Kubernetes and container security.
• Understanding of security risks in AI and LLM apps.
• Ability to communicate complex security concepts to engineers and management.
• Fluency in written and spoken English.

Aufgaben

• Conduct security maturity assessments using OWASP SAMM.
• Translate findings into prioritized security roadmaps.
• Develop and maintain security policies covering access control and incident response.
• Maintain security backlogs, risk registers, and monthly progress reports.
• Configure SSO and MFA across email, Git hosting, cloud, CI/CD, and Passbolt.
• Review access permissions and onboarding/offboarding procedures.
• Strengthen Passbolt security and manage secrets across apps and pipelines.
• Implement baseline security for devices, cloud accounts, backups, logging.
• Develop incident response procedures and tabletop exercises.
• Design Secure SDLC based on OWASP ASVS/SAMM.
• Roll out secure practices across client projects.
• Configure SecOps platform; reduce false positives; set quality gates.
• Integrate SAST, SCA, secrets scanning, IaC, container scanning, DAST, SBOM.
• Lead threat modeling sessions and document findings.
• Conduct security code reviews and assist developers.
• Perform internal security testing and coordinate external pen tests.
• Assess CRA/NIS2/GDPR impact on operations.
• Establish vulnerability handling and client CRA reporting support.
• Lead ISO/IEC 27001 preparation activities.
• Coordinate with certification body.

Kenntnisse

Information security

Application security

DevSecOps

Cloud security

CI/CD security

Kubernetes

Container security

Security tooling

English fluency

Tools

Security tools

CI/CD tooling

Passbolt

Jobbeschreibung

Jobgether is seeking a part-time Cybersecurity Consultant to strengthen security across software projects in a fully remote, international environment. You will lead secure development practices, implement IAM controls, and coordinate vulnerability management while mentoring the internal Security Lead.

The role emphasizes hands-on security engineering, policy development, and preparation for ISO/IEC 27001 certification, with flexible scheduling and a global workload.