Remote Cybersecurity Consultant - Part-Time SDLC & Cloud

Scopic; United States; Remote; USD 96.000 - 172.000; Teilzeit

Zusammenfassung

Scopic is a remote company offering a part-time cybersecurity role focused on building secure development lifecycle practices. You will work hands-on within repositories, pipelines, and cloud accounts to configure tools, fix issues, and document processes.

The role emphasizes hands-on security across AWS/Azure/GCP, SSO/MFA, policy writing, and secure CI/CD integration while communicating risks clearly to both engineers and management.

Qualifikationen

• 8+ years in information security with hands-on work in application security, DevSecOps or cloud security.
• Experience configuring security tools, pipeline configuration, code review and policy writing.
• Strong cloud security knowledge in AWS, Azure or GCP.
• Ability to explain risks clearly to engineers and management.
• Fluent English and knowledge of Kubernetes and container security.
• Knowledge of security risks in AI and LLM applications.

Aufgaben

• Assess security maturity and turn findings into a prioritized roadmap.
• Write core security policies and procedures and maintain risk and progress tracking.
• Configure SSO, MFA, access rights and onboarding/offboarding processes.
• Harden Passbolt, implement secrets management, and migrate secrets from code.
• Establish baseline hardening for laptops, cloud accounts, backups and logging.
• Design and roll out a Secure SDLC and integrate security tools into CI/CD.

Kenntnisse

Security policy writing

Cloud security

Kubernetes/container security

Communication of risks

Tools

AWS

Azure

GCP

Jobbeschreibung

Scopic is a remote company offering a part-time cybersecurity role focused on building secure development lifecycle practices. You will work hands-on within repositories, pipelines, and cloud accounts to configure tools, fix issues, and document processes.

The role emphasizes hands-on security across AWS/Azure/GCP, SSO/MFA, policy writing, and secure CI/CD integration while communicating risks clearly to both engineers and management.