Senior Security Consultant

Remote; San Francisco (CA); Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Remote work

US-based preferred

40 hours/week

Job summary

Partner Company in the United States seeks a Senior Security Consultant to lead hands‑on cybersecurity engagements across cloud, application, and infrastructure security. You will independently manage multiple client engagements, communicating findings to stakeholders and delivering actionable remediation plans.

This 100% remote, full‑time contractor role offers autonomy to work with diverse client environments and contribute to security architectures and roadmaps aligned with SOC 2, ISO 27001,

Qualifications

• 5–7 years hands-on cybersecurity or security consulting experience.
• Experience consulting or professional services, independently managing multiple external clients.
• Expertise in at least two domains: Cloud Security, Application Security, Infrastructure Security, or Detection and Response.
• Strong written and spoken English; client-facing communication.
• Knowledge of SOC 2 Type II and ISO 27001 controls.

Responsibilities

• Lead cloud security assessments across AWS, GCP, and Azure, IAM, network, and hardening.
• Conduct application security assessments including SDLC reviews and threat modeling.
• Assess infrastructure security with Kubernetes, containers, IaC, and secrets management.
• Configure and manage EDR, SIEM, CSPM, and vulnerability scanning tools.
• Design security architectures and roadmaps aligned with SOC 2, ISO 27001, HIPAA.
• Lead client engagements, communicate findings, and develop remediation plans.
• Produce security reports and implementation guidelines.

Skills

Cloud Security

Application Security

Infrastructure Security

Detection & Response

English Communication

Tools

EDR

SIEM

CSPM

Vulnerability Scanning

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Consultant based in United States.

As a Senior Security Consultant, you will lead hands‑on cybersecurity engagements, helping organizations strengthen their security posture across cloud environments, applications, and IT infrastructure. You will independently manage technical security projects from initial assessment and scoping through implementation and final delivery. Working closely with engineering teams and senior client stakeholders, you will identify vulnerabilities, assess security risks, and develop practical solutions aligned with industry standards. You will leverage your expertise across cloud security, application security, infrastructure protection, and threat detection to address complex technical challenges. This client-facing role offers the opportunity to work across multiple organizations, influence security strategies, and deliver measurable improvements. You will join a dynamic consulting environment that values technical excellence, autonomy, and the ability to turn security challenges into actionable business outcomes.

Accountabilities:

• Lead cloud security assessments across AWS, GCP, and Azure, covering identity and access management (IAM), network security, configuration reviews, and infrastructure hardening.

• Conduct application security assessments, including secure software development lifecycle (SDLC) reviews, threat modeling, code reviews, and CI/CD pipeline security evaluations.

• Assess and strengthen infrastructure security across Kubernetes, containerized environments, infrastructure as code (IaC), and secrets management.

• Implement, configure, and manage security solutions, including Endpoint Detection and Response (EDR), Security Information and Event Management (SIEM), Cloud Security Posture Management (CSPM), and vulnerability scanning tools.

• Design and recommend security architectures, technical controls, and improvement roadmaps aligned with SOC 2, ISO 27001, and HIPAA requirements.

• Independently manage multiple client engagements, taking ownership of project scoping, technical assessments, implementation activities, and final delivery.

• Collaborate directly with engineering teams, technical specialists, and client stakeholders to communicate findings and drive security improvements.

• Lead client meetings, present technical recommendations, and translate complex security issues into clear, actionable remediation plans.

• Produce comprehensive technical reports, security assessments, architecture documentation, and implementation guidelines.

Requirements:

• 5-7 years of hands‑on experience in cybersecurity, information security, or technical security consulting, with a strong track record of delivering technical projects.

• Mandatory previous experience in consulting or professional services, including independently managing multiple external clients and leading security engagements.

• Deep, hands‑on technical expertise in at least two of the following domains:

  • Cloud Security: Experience with AWS, GCP, or Azure, including IAM, cloud networking, security configurations, and infrastructure hardening.

  • Application Security: Knowledge of secure SDLC practices, threat modeling, code reviews, application vulnerabilities, and CI/CD security.

  • Infrastructure Security: Practical experience with Kubernetes, containers, infrastructure as code (IaC), and secrets management.

  • Detection and Response: Experience with EDR, SIEM, vulnerability management, security monitoring, and incident response.

• Working knowledge of SOC 2 Type II and ISO 27001, including practical experience implementing technical security controls.

• Strong technical writing and documentation skills, with the ability to produce clear, structured security reports and remediation recommendations.

• Excellent communication and stakeholder management abilities, with professional‑level written and spoken English.

• Confidence leading technical discussions and collaborating daily with U.S.-based clients.

• Ability to work autonomously, manage competing priorities, and deliver high‑quality results across multiple client engagements.

Nice to Have:

• Relevant industry certifications such as CISSP, OSCP, AWS Security Specialty, or equivalent qualifications.

• Proven experience leading end‑to‑end security consulting engagements, from initial assessment and scoping through implementation and final delivery.

Benefits:

• Full‑time, long‑term independent contractor opportunity.

• 100% remote work arrangement, with preference for candidates based in the United States.

• 40‑hour working week.

• Opportunity to work on diverse technical cybersecurity projects across multiple client environments.

• Direct exposure to engineering teams, technical decision‑makers, and client stakeholders.

• Significant autonomy and ownership of security engagements from assessment through delivery.

• Opportunity to strengthen expertise across cloud, application, infrastructure, and enterprise security.

• Professional growth through exposure to complex security challenges, modern technologies, and industry best practices.