Cybersecurity Consultant - AWS Cloud, Payments & Compliance

emagine; Portugal; Remote; EUR 90,000 - 120,000; Full time

Job summary

emagine is seeking a Senior Cybersecurity Consultant to bolster our AWS cloud security posture. You will diagnose, design, and implement security controls across multi-account AWS environments, guiding governance to technical deployment while transferring knowledge to the Security Department.

The role requires hands-on expertise in cloud security, DevSecOps, and PCI DSS/ISO 27001 compliance within regulated payments or banking contexts, with fluency in French and English. Remote from Portugal.

Qualifications

• Master's degree in Computer Science, Cybersecurity, or an equivalent field.
• At least 10 years of information-systems security experience.
• At least 5 years in production AWS environments.
• Experience with PCI DSS and ISO 27001 in regulated contexts.
• Hands-on consulting in security and development teams.

Responsibilities

• Design a secure AWS multi-account architecture with strict segmentation.
• Harden identity management and ensure least-privilege access.
• Manage the security posture using various AWS security services.
• Integrate security into CI/CD processes.
• Implement centralized logging and detection systems.
• Lead compliance initiatives with PCI DSS and ISO 27001.
• Conduct risk analysis and manage supplier relationships.
• Deploy an awareness program covering security threats.
• Define and govern AI usage policies.

Skills

Information security

AWS security

DevSecOps

Cloud security

Regulated environments

Education

Master's degree in Computer Science, Cybersecurity or equivalent

Tools

AWS

CI/CD tooling

Logging/Monitoring tools

Job description

Job Title: Senior Cybersecurity Consultant - AWS Cloud, Payments & Compliance

Reporting Line: Security Department, reporting directly to the CISO. The consultant is positioned directly below the CISO within the Security Department.

Key Stakeholders: Work with the Security Department team, IT leadership, Development and DevOps/SRE teams, Compliance, Legal, Finance, service providers, and national regulators.

Location: Remote, Portugal based

Availability: Support to the crisis-management team in the event of a major incident.

Primary Mission: Support the Security Department in addressing existing security issues and enhancing the organization's security maturity, from governance through to technical implementation on AWS.

The consultant will work hands-on, diagnosing, prioritizing, designing solutions, and ensuring knowledge transfer to empower the Security Department upon completion of the assignment.

Main Responsibilities:

• Design a secure AWS multi-account architecture with strict segmentation.
• Harden identity management and ensure least-privilege access.
• Manage the security posture using various AWS security services.
• Integrate security into CI/CD processes.
• Implement centralized logging and detection systems.
• Lead compliance initiatives with PCI DSS and ISO 27001.
• Conduct risk analysis and manage supplier relationships.
• Deploy an awareness program covering security threats.
• Define and govern AI usage policies.

Key Requirements:

• Master's degree in Computer Science, Cybersecurity or equivalent.
• Minimum 10 years of experience in information-systems security.
• At least 5 years of experience in production AWS environments.
• Proven experience in regulated environments such as payments or banking.
• One end-to-end PCI DSS compliance project and ISO 27001 project.
• Experience with hands-on consulting assignments in security and development teams.
• Proficiency in AWS security services, DevSecOps, and application security.
• Fluency in French and English is essential.

Nice to Have:

• CISSP, AWS Certified Security - Specialty, ISO 27001 certifications.
• Experience in risk management and incident response.
• Knowledge in automation and scripting languages.

Other Details:

A focus on compliance with established frameworks such as PCI DSS and ISO 27001 is emphasized, alongside risk management practices in the cybersecurity domain.