Consultant - Cybersecurity

Qualifications & Experience -

Technical Environment -

Certifications (Desirable) =

Responsibilities

• Support the definition of mitigation strategies and security improvements.
• Security Engineering: Support implementation, configuration, and improvement of cybersecurity controls across on-premise and cloud environments.
• Identity Security: Support Microsoft Entra ID and Active Directory, including MFA, Conditional Access, privileged access, and access reviews.
• Cloud Security: Support security assessments and hardening across Microsoft Azure and GCP, including identity, network security, logging, encryption, and secure configuration.
• Network Security: Support network segmentation, access controls, VPNs, and firewall security, including FortiGate.
• Vulnerability Management: Perform vulnerability scanning, analyse findings, prioritise risks, coordinate remediation, and validate fixes.
• Cryptography & Secrets Management: Support secure management of cryptographic keys, certificates, encryption, secrets, and credentials using platforms such as HashiCorp Vault, Azure Key Vault, and GCP Secret Manager.
• API Security: Support security assessments and controls for APIs, including authentication, authorisation, encryption, access controls, API gateways, and common API vulnerabilities.
• DevSecOps: Integrate security into CI/CD processes, including SAST, dependency scanning, secrets detection, container security, and IaC security.
• Terraform / IaC Security: Review and improve security controls within Terraform and infrastructure-as-code environments.
• Incident Response: Support security investigations, incident response, remediation, and lessons learned.
• Security Policies & Standards: Support development and implementation of cybersecurity policies, technical standards, hardening baselines, and security procedures.
• Security Assessments: Provide cybersecurity input into technology projects, architecture reviews, risk assessments, and audits.
• Automation & Continuous Improvement: Identify opportunities to automate security processes and continuously improve the organisation’s security posture.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent practical experience.
• 2-4 years of experience in cybersecurity, security engineering, cloud security, infrastructure security, or related technical roles.
• Practical understanding of cybersecurity, networking, identity and access management, cloud security, infrastructure security, cryptography, secrets management, and API security.
• Hands-on experience with several of the technologies listed below, with the ability and willingness to develop expertise across the broader technology environment.
• Strong analytical, problem-solving, and troubleshooting skills.
• Strong verbal and written English communication skills.
• Experience or exposure to:
• Microsoft Entra ID & Active Directory
• Microsoft Azure & Google Cloud Platform (GCP)
• HashiCorp Vault
• Azure Key Vault, GCP Secret Manager, or equivalent secrets management solutions
• Cryptography, PKI, certificates, encryption, and key management
• API security and API gateways
• Windows and Linux infrastructure
• Networking and network segmentation
• FortiGate or similar enterprise firewall technologies
• Vulnerability scanning and vulnerability management tools
• Terraform and Infrastructure as Code (IaC)
• DevSecOps and CI/CD security practices
• Security monitoring, incident response, and threat remediation
• Python, PowerShell, Bash, or similar scripting languages
• CompTIA Security+ and/or CySA+
• Microsoft or Google Cloud Security Certifications
• Fortinet Certifications
• HashiCorp and/or Terraform Certifications
• Certified Cloud Security Professional (CCSP) and/or Certified Information Systems Security Professional (CISSP)
• GIAC Certifications