Senior Security Consultant

Jobgether; Oregon; Hybrid; USD 140,000 - 180,000; Full time

Benefits offered by this job

100% remote work

40-hour work week

Long-term contract

Diverse client projects

Autonomy and ownership

Job summary

Jobgether is seeking a Senior Security Consultant based in the United States for remote, client-facing work. You will lead security assessments across cloud environments (AWS, GCP, Azure), review applications, and strengthen infrastructure security while guiding remediation with stakeholders.

You will manage multiple client engagements end-to-end, collaborate with engineering teams, and deliver comprehensive reports and architecture guidance aligned with SOC 2, ISO 27001, and HIPAA.

Qualifications

• 5–7 years of hands-on cybersecurity consulting experience.
• Experience independently managing multiple external clients and engagements.
• Deep hands-on expertise in at least two domains among Cloud, Application, Infrastructure, or Detection & Response.
• Working knowledge of SOC 2 Type II and ISO 27001 with practical controls implementation.
• Strong technical writing and clear security reporting in English.

Responsibilities

• Lead cloud security assessments across AWS, GCP, and Azure, including IAM and hardening.
• Perform application security reviews, threat modeling, and SDLC assessments.
• Improve infrastructure security with Kubernetes, IaC, and secret management.
• Implement and manage EDR, SIEM, CSPM, and vulnerability tools.
• Design security architectures and roadmaps aligned to SOC 2/ISO 27001/HIPAA.
• Manage multiple client engagements and deliver final security results.
• Present findings to clients and translate issues into remediation actions.
• Produce detailed security reports, architecture docs, and implementation guidelines.

Skills

Cloud security

Application security

Infrastructure security

Detection & response

Technical writing

Stakeholder management

Tools

EDR

SIEM

CSPM

Vulnerability scanning

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Consultant based in United States.

Accountabilities:

• Lead cloud security assessments across AWS, GCP, and Azure, covering identity and access management (IAM), network security, configuration reviews, and infrastructure hardening.
• Conduct application security assessments, including secure software development lifecycle (SDLC) reviews, threat modeling, code reviews, and CI/CD pipeline security evaluations.
• Assess and strengthen infrastructure security across Kubernetes, containerized environments, infrastructure as code (IaC), and secrets management.
• Implement, configure, and manage security solutions, including Endpoint Detection and Response (EDR), Security Information and Event Management (SIEM), Cloud Security Posture Management (CSPM), and vulnerability scanning tools.
• Design and recommend security architectures, technical controls, and improvement roadmaps aligned with SOC 2, ISO 27001, and HIPAA requirements.
• Independently manage multiple client engagements, taking ownership of project scoping, technical assessments, implementation activities, and final delivery.
• Collaborate directly with engineering teams, technical specialists, and client stakeholders to communicate findings and drive security improvements.
• Lead client meetings, present technical recommendations, and translate complex security issues into clear, actionable remediation plans.
• Produce comprehensive technical reports, security assessments, architecture documentation, and implementation guidelines.

Requirements:

• 5–7 years of hands‑on experience in cybersecurity, information security, or technical security consulting, with a strong track record of delivering technical projects.
• Mandatory previous experience in consulting or professional services, including independently managing multiple external clients and leading security engagements.
• Deep, hands‑on technical expertise in at least two of the following domains:
• • Cloud Security: Experience with AWS, GCP, or Azure, including IAM, cloud networking, security configurations, and infrastructure hardening.
  • Application Security: Knowledge of secure SDLC practices, threat modeling, code reviews, application vulnerabilities, and CI/CD security.
  • Infrastructure Security: Practical experience with Kubernetes, containers, infrastructure as code (IaC), and secrets management.
  • Detection and Response: Experience with EDR, SIEM, vulnerability management, security monitoring, and incident response.
• Working knowledge of SOC 2 Type II and ISO 27001, including practical experience implementing technical security controls.
• Strong technical writing and documentation skills, with the ability to produce clear, structured security reports and remediation recommendations.
• Excellent communication and stakeholder management abilities, with professional‑level written and spoken English.
• Confidence leading technical discussions and collaborating daily with U.S.-based clients.
• Ability to work autonomously, manage competing priorities, and deliver high‑quality results across multiple client engagements.

Nice to Have:

• Relevant industry certifications such as CISSP, OSCP, AWS Security Specialty, or equivalent qualifications.
• Proven experience leading end‑to‑end security consulting engagements, from initial assessment and scoping through implementation and final delivery.

Benefits:

• Full‑time, long‑term independent contractor opportunity.
• 100% remote work arrangement, with preference for candidates based in the United States.
• 40‑hour working week.
• Opportunity to work on diverse technical cybersecurity projects across multiple client environments.
• Direct exposure to engineering teams, technical decision‑makers, and client stakeholders.
• Significant autonomy and ownership of security engagements from assessment through delivery.
• Opportunity to strengthen expertise across cloud, application, infrastructure, and enterprise security.
• Professional growth through exposure to complex security challenges, modern technologies, and industry best practices.