Senior SSDLC & GRC Security Consultant – Remote

MBC TECHNOLOGY GROUP INC; Poland; Remote; PLN 618,000 - 1,030,000; Part time

Job summary

MBCTG is seeking a Senior SSDLC Security Consultant for a 3-month remote contract. You will integrate security governance, risk management, and compliance into the software development lifecycle, working with developers, DevOps, and security architects to enforce secure coding and cloud security standards.

Key focus areas include SSDLC practices, threat modeling, vulnerability remediation, and alignment with NIST CSF, NIST SSDF, and OWASP best practices in a Microsoft Azure environment.

Qualifications

• 2+ years of experience in cybersecurity, GRC, or application security.
• Understanding of SSDLC and DevSecOps practices.
• Familiarity with application security principles, including OWASP Top 10.
• Basic understanding of cloud security concepts, preferably in Microsoft Azure.
• Strong documentation, communication, and cross-team collaboration skills.

Responsibilities

• Support the development and implementation of Secure Software Development Lifecycle (SSDLC) practices across full-stack development projects.
• Collaborate with software engineers, DevOps teams, and architects to embed security and compliance requirements into development workflows.
• Assist in implementing security controls aligned with frameworks such as NIST SSDF, NIST CSF, and OWASP best practices.
• Participate in secure design reviews, architecture discussions, and threat modeling sessions for applications hosted on Microsoft Azure.
• Assist with documenting and maintaining secure coding standards and application security policies.
• Identify and track security risks related to application development, cloud infrastructure, and third-party components.
• Maintain risk registers, control mappings, and compliance documentation for SSDLC processes.
• Support vulnerability management by helping track remediation activities for issues discovered during code scanning, penetration testing, or security reviews.

Skills

SSDLC

DevSecOps

Threat modeling

Azure

NIST CSF

OWASP Top 10

Cloud security

Documentation

Collaboration

Education

Bachelor’s degree in Information Security, Computer Science, Software Engineering, or related field

Tools

Azure DevOps

GitHub

Snyk

Checkmarx

Veracode

SonarQube

Job description

MBCTG is seeking a Senior SSDLC Security Consultant for a 3-month remote contract. You will integrate security governance, risk management, and compliance into the software development lifecycle, working with developers, DevOps, and security architects to enforce secure coding and cloud security standards.

Key focus areas include SSDLC practices, threat modeling, vulnerability remediation, and alignment with NIST CSF, NIST SSDF, and OWASP best practices in a Microsoft Azure environment.