Remote Cybersecurity Engineer — Secure SDLC & SecOps

Scopic; United States; Remote; USD 83,000 - 165,000; Part time

Benefits offered by this job

Paid training

Flexible remote work

Travel opportunities

Annual pay increases

Job summary

Scopic is seeking a senior security professional for a remote, hourly position. You’ll work hands-on across security governance, secure software development, compliance, and client security offerings, partnering with engineers to harden pipelines and cloud accounts.

You’ll implement a Secure SDLC based on OWASP, configure SSO/MFA, manage risk, and lead incident response exercises while mentoring the team and advancing ISO/IEC 27001 readiness. Fluency in English required.

Qualifications

• 8+ years of information security experience with hands-on app security, DevSecOps or cloud security.
• Hands-on experience configuring security tools, pipelines, reviewing code, and writing policies.
• Strong cloud security knowledge across AWS/Azure/GCP.
• Ability to explain security risks in plain language to engineers and management.
• Fluent English, both written and spoken.
• Kubernetes and container security experience.
• Knowledge of security risks in AI and LLM-based applications.

Responsibilities

• Run security maturity assessments (e.g., OWASP SAMM) and draft a prioritized roadmap.
• Write core security policies and procedures: access control, acceptable use, secure development, incident response.
• Maintain security backlog, risk register, and progress metrics; report monthly.
• Configure and enforce SSO and MFA across email, Git hosting, cloud consoles, CI/CD and Passbolt.
• Review access rights and onboarding/offboarding checklists.
• Harden Passbolt and set up a secrets manager; migrate secrets from code/CI vars.
• Baseline hardening for laptops, cloud accounts, backups and logging.
• Write the incident response plan and run tabletop exercises with the team.
• Build Secure SDLC based on OWASP ASVS/SAMM and roll out on client projects.
• Tune SecOps platform; reduce False positives; set up quality gates and triage findings.
• Add SAST, SCA, secrets scanning, IaC/container scanning, DAST, SBOM generation.
• Run threat modeling sessions and document results.
• Do security code reviews and help developers fix vulnerabilities.
• Perform internal security testing and coordinate external penetration tests.
• Map CRA, NIS2 and GDPR implications for us and clients.
• Write and implement vulnerability handling and disclosure processes.
• Assist in ISO/IEC 27001 preparation with certification body.
• Help define security service offerings for clients; fill client security questionnaires.
• Join client meetings as senior security voice when needed.
• Collaborate with Security Lead; run internal workshops; suggest training paths.

Skills

Fluent English

Kubernetes security

Container security

Cloud security

DevSecOps

Application security

Security policy writing

Job description

Scopic is seeking a senior security professional for a remote, hourly position. You’ll work hands-on across security governance, secure software development, compliance, and client security offerings, partnering with engineers to harden pipelines and cloud accounts.

You’ll implement a Secure SDLC based on OWASP, configure SSO/MFA, manage risk, and lead incident response exercises while mentoring the team and advancing ISO/IEC 27001 readiness. Fluency in English required.