Easy JobRemote Cybersecurity Consultant
Scopic · Worldwide · Part-time · Remote
Category: IT Services
Location:
This is a hands-on role. We are not looking for someone to only advise us and leave the work to our team: you will do a large part of the security work yourself, working inside our repositories, pipelines and cloud accounts alongside our engineers. You will configure tools, fix and harden things, write the processes and documents, and run the sessions, while showing our team how it is done along the way.
Our goal is a company that runs a secure development lifecycle on every project, has its own house in order, is well on the way to ISO/IEC 27001 certification, and has an internal Security Lead who can work with you and gradually take over day-to-day ownership. This is a part-time role.
Responsibilities
Assessment and governance
• Run the security maturity assessment yourself (for example OWASP SAMM), review our repositories, pipelines and cloud setup, and turn the findings into a prioritized roadmap.
• Write our core security policies and procedures: access control, acceptable use, secure development, incident response, vendor and AI tool usage.
• Set up and maintain the security backlog, risk register and progress metrics, and report progress to management monthly.
Company security ("secure the house")
• Configure and enforce SSO and MFA across email, Git hosting, cloud consoles, CI/CD and Passbolt.
• Review and fix access rights, and set up onboarding and offboarding checklists.
• Harden our Passbolt setup and implement a secrets manager for applications and pipelines, including migrating existing secrets out of code and CI variables.
• Implement baseline hardening for laptops, cloud accounts, backups and logging.
• Write the incident response plan and run tabletop exercises with the team.
Secure software development
• Build our standard Secure SDLC, based on OWASP ASVS and OWASP SAMM, and roll it out on real client projects.
• Configure and tune our SecOps platform: reduce false positives, set up pipelin