Security Consultant

Security ConsultantWe are seeking an experienced Security Consultant to assess, design, and improve the organization's cybersecurity posture. The ideal candidate will identify security risks, perform security assessments, recommend remediation strategies, and work closely with IT, engineering, and business teams to implement security best practices. The Security Consultant will support compliance initiatives, conduct risk assessments, and help secure cloud, network, and application environments.Key Responsibilities:Conduct security assessments, vulnerability assessments, and security audits across IT environments.Perform risk assessments and develop mitigation strategies aligned with business objectives.Advise on security architecture for on-premises, cloud, and hybrid infrastructures.Develop and review security policies, standards, procedures, and technical documentation.Support compliance initiatives for standards and regulations such as ISO/IEC 27001, NIST Cybersecurity Framework (CSF), PCI DSS, HIPAA, SOC 2, and GDPR, as applicable.Collaborate with infrastructure, DevOps, application development, and cloud teams to integrate security best practices.Review network, cloud, endpoint, identity, and application security controls.Coordinate and validate vulnerability remediation efforts with technical teams.Assist with incident response activities, root cause analysis, and post-incident reviews.Evaluate and recommend security technologies, tools, and architectural improvements.Deliver security awareness sessions and provide guidance to internal stakeholders.Stay informed on emerging cyber threats, vulnerabilities, and industry trends.Required Skills:Strong understanding of cybersecurity principles and risk management.Knowledge of network security, firewalls, VPNs, IDS/IPS, WAFs, and Zero Trust concepts.Experience with cloud security in AWS, Microsoft Azure, or Google Cloud Platform (GCP).Familiarity with Identity and Access Management (IAM), Privileged Access Management (PAM), and Multi-Factor Authentication (MFA).Experience with vulnerability management and security assessment tools.Understanding of endpoint security, SIEM, EDR, and XDR technologies.Knowledge of secure system architecture and security hardening.Familiarity with scripting or automation using Python, PowerShell, or Bash.Strong analytical, communication, documentation, and stakeholder management skills.Preferred Qualifications:Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field.4–8+ years of experience in cybersecurity consulting, security engineering, or information security.Experience supporting enterprise security programs and governance initiatives.Familiarity with DevSecOps and secure software development practices.Experience conducting security reviews for cloud and hybrid environments.Nice-to-Have Skills:Threat modelingSecurity architecture designCloud securityDevSecOpsInfrastructure as Code (Terraform, Ansible)Kubernetes securityDocker securityAPI securityPenetration testingThreat intelligenceMITRE Telecommunication&CK frameworkOWASP Top 10Tools & Technologies:Microsoft Defender XDRCrowdStrike FalconMicrosoft SentinelSplunk QRadarTenable NessusQualys VMDRRapid7 InsightVMBurp SuiteWiresharkAWS Security HubMicrosoft Defender for CloudPrisma CloudTerraformAnsibleKubernetesDockerGitKey Competencies:Risk assessment and decision-makingAnalytical and problem-solving skillsStrong communication and presentation abilitiesClient and stakeholder managementSecurity consulting and advisory mindsetDocumentation and reportingCollaboration and teamworkContinuous learningKey Performance Indicators (KPIs):Number and quality of security assessments completedRisk reduction and remediation effectivenessVulnerability remediation closure rateCompliance audit success rateSecurity policy and standards adoptionIncident response support effectivenessClient or stakeholder satisfactionImprovement in overall security posturePreferred Certifications:Certified Information Systems Security Professional (CISSP)Certified Cloud Security Professional (CCSP)Certified Information Security Manager (CISM)CompTIA Security+CompTIA CySA+GIAC Security Essentials (GSEC)ISO/IEC 27001 Lead Implementer or Lead AuditorMicrosoft Certified: Cybersecurity Architect ExpertAWS Certified Security – SpecialtyCertified Ethical Hacker (CEH)