Cloud Security Consultant

A boutique cybersecurity consultancy serving small and mid‑sized clients across healthcare, legal, technology, media, fintech, and consumer sectors is hiring a cloud security consultant to own client relationships end to end. You would be the technical and strategic point person for a small portfolio of clients, running cloud security assessments, shaping security programs, and translating the work for both engineers and executives. This is a role for someone who wants the variety of consulting without the narrow scope, where no two days look the same and you grow into the engagements and clients that suit you best. You would have wide latitude to bring AI and automation into the work to deliver better outcomes faster.
Compensation: $140,000 to $150,000 base, plus spot bonuses
Logistics: Remote in the US, cannot support sponsorship
What you would be doing: Own a handful of client engagements as the point person, guiding clients through their security roadmap and acting as the trusted advisor on what to tackle and when
Run cloud security assessments, identify misconfigurations, and hold credible technical conversations with client cloud and engineering teams
Understand and speak to a clients security program as a whole, with the ability to lead smaller engagements in a virtual CISO capacity
Scope penetration tests and red team exercises, review findings, and translate them into clear remediation guidance; hands‑on testing is outsourced
Lead identity and access management work including access reviews and response to identity anomalies, and support monitoring, detection, and response across endpoint and identity
Serve as the technical go‑to on incident response across clients
Build scripting and process improvements that automate delivery work, and bring AI into your workflow to free up time for higher‑impact client work
Provide first‑pass sales support, surfacing opportunities to expand services and walking clients through the occasional tool demo
What you would bring: A consulting mindset and genuine client‑facing ability, comfortable owning relationships, navigating ambiguity, and communicating with both technical and non‑technical audiences
A working understanding of security programs as a whole, with governance, risk, and compliance experience across frameworks such as NIST, SOC2, ISO27001, or similar; audit andATO readiness experience is a strong plus
Cloud security competence with a focus on AWS, enough to assess environments and advise client teams
Comfortable CLI experience and general scripting ability
Working knowledge of IAM concepts and identity monitoring
Familiarity with MDR and endpoint and identity monitoring solutions
Exposure to penetration testing sufficient to scope and interpret engagements; you do not need to be a working pen tester
Fluent use of AI tooling in your daily work, and the drive to use it more
A high tolerance for ambiguity and a self‑directed, figure‑it‑out approach in a small, fast‑moving team
Prior consulting or vCISO experience is a strong plus. Terraform, containers, and Kubernetes are not required