External Cybersecurity & Technical Assurance Specialist

Job Description

Job Description

I would  change this from a normal “position” to a specialist engagement.

You don’t necessarily need another person sitting in weekly staff meetings for 90 days.

You need someone capable of coming in and saying:

Here’s what is secure.
Here’s what isn’t.
Here’s the severity.
Here’s what must be fixed now.
Here’s what can wait.

Engagement

Independent consultant / specialist firm / scoped technical engagement

Work Arrangement

Remote preferred; controlled authorized access only

About the Engagement

Verde Nexus seeks qualified external cybersecurity and technical-assurance specialists to independently assess selected components of its globally scalable education, marketplace and digital-commerce environment.

The engagement will focus on identifying material security risks, validating technical safeguards, reviewing priority architecture and integration areas, and providing actionable remediation guidance before expanded pilot and commercial use.

Scope May Include

• Application-security review.
• Authentication and authorization assessment.
• Role/permission review.
• Cloud/Supabase configuration review.
• API security assessment.
• Payment-security architecture review.
• Sensitive-data handling assessment.
• Secrets/key-management review.
• Dependency and vulnerability review.
• Logging and monitoring assessment.
• Incident-response readiness.
• Backup/recovery review where applicable.
• Security configuration assessment.
• Controlled vulnerability testing.
• Remediation verification.
• Security documentation.
• Recommendations informed by NIST/OWASP and other applicable frameworks.

Key Responsibilities

• Establish authorized assessment scope before testing.
• Identify vulnerabilities and security-control gaps.
• Classify findings by severity and business impact.
• Provide reproducible evidence for material findings.
• Avoid disruption of production systems.
• Recommend practical remediation.
• Coordinate with the Technical Product & QA Lead.
• Retest material findings after remediation.
• Provide executive and technical versions of findings.
• Maintain confidentiality concerning architecture, credentials and vulnerabilities.

What Success Looks Like

• Critical vulnerabilities identified before exploitation.
• High-severity issues have remediation plans.
• Security findings are documented and prioritized.
• Remediation is independently verified.
• Leadership understands material technical risk.
• Platform becomes more diligence-ready for institutional partners and investors.

Ideal Specialist

• Demonstrated application/cloud security experience.
• Web/SaaS security-assessment experience.
• Familiarity with APIs, authentication systems and cloud databases.
• Ability to assess modern JavaScript/cloud architectures.
• Experience with vulnerability management and secure-development practices.
• Strong written reporting.
• Ability to communicate risk in business terms.
• Relevant credentials such as CISSP, CISM, OSCP, Security+, cloud-security credentials or equivalent experience welcomed.
• Experience with NIST, OWASP, SOC 2 readiness, privacy/security controls or related frameworks advantageous.

Compensation

• Fixed-scope project fee, hourly consulting arrangement or defined assessment milestone payments.
• No commission structure.
• Future periodic assessments or retained security services may be offered based on need and funding.

\nCompany Description

Verde Nexus Global is building a globally scalable ecosystem at the intersection of AI-enabled education, workforce development, sustainability, agriculture, digital commerce, affiliate infrastructure, and global marketplace opportunities. Designed for reach across 47+ countries and 22+ languages, the platform connects learners, instructors, entrepreneurs, affiliates, vendors, institutional partners, and communities through one integrated digital ecosystem.

Verde Nexus combines AI-enabled learning, digital entrepreneurship, sustainable and organic commerce, workforce pathways, institutional partnerships, vendor-marketplace infrastructure, and recurring-revenue models to create measurable economic and social impact. Our U.S. flagship pilot begins in the Raleigh-Durham market while international market development progresses in parallel.

We are building a performance-driven, globally minded team of professionals who value innovation, accountability, collaboration, sustainability, and measurable execution. Team members have the opportunity to contribute during an early stage of growth while helping build systems, partnerships, and market pathways designed for long-term global scale.

Company Description

Verde Nexus Global is building a globally scalable ecosystem at the intersection of AI-enabled education, workforce development, sustainability, agriculture, digital commerce, affiliate infrastructure, and global marketplace opportunities. Designed for reach across 47+ countries and 22+ languages, the platform connects learners, instructors, entrepreneurs, affiliates, vendors, institutional partners, and communities through one integrated digital ecosystem.\n\nVerde Nexus combines AI-enabled learning, digital entrepreneurship, sustainable and organic commerce, workforce pathways, institutional partnerships, vendor-marketplace infrastructure, and recurring-revenue models to create measurable economic and social impact. Our U.S. flagship pilot begins in the Raleigh-Durham market while international market development progresses in parallel.\n\nWe are building a performance-driven, globally minded team of professionals who value innovation, accountability, collaboration, sustainability, and measurable execution. Team members have the opportunity to contribute during an early stage of growth while helping build systems, partnerships, and market pathways designed for long-term global scale.