IT Security Consultant

BayInfotech; Foster City (CA); On-site; USD 120,000 - 180,000; Full time

Job summary

BayInfotech seeks an information security consultant with 7–8 years of experience to work as an individual contributor. The role emphasizes policy development, risk assessments, and security baseline creation, with hands-on capability in ethical hacking and threat mitigation.

The candidate should be adept at producing clear documentation and communicating complex security concepts to stakeholders. This position is based in Foster City, CA, and involves working onsite with potential for

Qualifications

• Experience in security policy development and implementation.
• Hands-on ethical hacking experience and threat countermeasures.
• Knowledge of NIST and ISO 27001-2/27005 standards.
• Ability to conduct risk assessments and produce documentation.
• Comfort with deep-dive analysis of technologies and risks.

Responsibilities

• Contribute as an independent information security consultant.
• Develop security policies, standards, and baseline configurations.
• Lead security awareness programs and risk assessments as needed.

Skills

Security Policy Development

Ethical Hacking

Security Standards

Security Awareness

NIST/ISO 27001-2/27005

Security Risk Assessments

Documentation

Tech Risk Deep Dives

Positive Attitude

Security Engineering

Project Management

Job description

We have an immediate opening for an information security consultant. Candidate must have the following skill sets as described below. It will be an individual contributor position will not be leading any teams. 7 to 8 years of experience needed.

Primary Skills

• Security Policy Development
• Ethical Hacking experience (APT)/Counter attacks
• Security Standards and Baseline Development
• Security Awareness Program Development
• NIST and ISO 27001-2, 27005 Knowledgeable
• Knowledgeable in conducting security and risk assessments
• Creating documentations will also be key for this position
• Technically sound and doesn’t mind doing deep dives into technologies to understand issues and Technology Risks
• Positive and Can-Do Attitude

Secondary Skills (Preferred)

• Security Engineering
• Project Management