Cyber Security Consultant

Role overview

Key responsibilities

• Define and implement security controls, network segmentation, and access policies across web, mobile, API, IoT, and on-premise systems.
• Work with embedded engineers to secure device identities, firmware updates, communication channels, and per-device certificates.
• Establish and review standards for PKI, TLS/mTLS, secrets management, authentication, and encryption.
• Lead vulnerability management, coordinate penetration testing, and harden Linux, firewall, and network configurations.
• Develop incident-handling procedures, define security logging and SIEM requirements, and investigate security events.

Core requirements

• 5+ years of dedicated hands-on cybersecurity or information security experience.
• Strong expertise in Linux hardening, web/API security (OWASP Top 10), network segmentation, VPNs, and firewalls.
• Proven experience implementing PKI, TLS/mTLS, certificate management, OAuth2, and OIDC.
• Hands-on experience with SIEM monitoring, vulnerability scanning, penetration testing methodologies, and incident response.

Nice-to-have skills

• IoT security experience with MQTT, Secure Boot, per-device certificates, or firmware-signing concepts.
• Familiarity with HashiCorp Vault, Keycloak, or securing AI models/local AI infrastructure.
• OSCP, CISSP, CEH, or Security+ credentials, or working knowledge of ISO 27001, NIST, or CIS benchmarks.