Senior Security Consultant Job at Outpost24 Group (Karlskrona)

Senior Security Consultant

The Senior Security Consultant will lead security architecture design and compli...

Location

United States , Cheyenne

Salary:

97864.00 - 145000.00 USD / Year

NTT DATA

Expiration Date

Until further notice

Requirements

Minimum ten (10) years of combined, progressive experience in cybersecurity, information assurance, or IT security, including senior advisory, advanced practitioner, or program-level leadership responsibilities
Demonstrated expertise in: Threat modeling
Security architecture
Security and privacy risk assessments across the full Software Development Life Cycle (SDLC) and production environments
Proven experience in IT governance, risk, and compliance (GRC), including: Internal and external audit and compliance assessments
Drafting and maintaining security and privacy documentation
Conducting security and privacy risk assessments
Extensive experience developing and supporting: Security Incident Response Plans
System Security & Privacy Plans (SSPPs)
Risk Assessments and POA&M remediation strategies

Job Responsibility

Provides System Integration security architecture design and collaborate with the client to document security standards and provide security architecture advice and oversight to module vendors in support of module solution development, integration, and infrastructure
Responsible for adherence to State security standards, communications with State Chief Information Security Officer (CISO), compliance with HIPAA, Health Information Technology for Economic and Clinical Health (HITECH) and NIST requirements, and Internal Revenue Service (IRS) Federal Tax Information

What we offer

medical insurance
dental insurance
vision insurance with an employer contribution
flexible spending or health savings account
life and AD&D insurance
short and long term disability coverage
paid time off
employee assistance
participation in a 401k program with company match
additional voluntary or legally-required benefits

Fulltime

Senior Security Consultant

We have an exciting opportunity for a Senior Security Consultant to join our gro...

Location

United Kingdom , Glasgow or Reading, Berkshire

Salary:

Not provided

FSP

Expiration Date

Until further notice

Requirements

Extensive experience of designing, leading and delivering cyber governance, risk and assurance outcomes
Strong knowledge of recognised cyber security frameworks and standards, including ISO/IEC 27001, NIS Directives, NIST, and UK Government Functional Standards
Experience aligning security controls to MOD requirements such as DEFSTAN 05-138, JSP 440, JSP 604 and Defence Cyber Resilience policies
Experience applying UK Government security and assurance frameworks, including GovAssure, the Cyber Assessment Framework (CAF), Defence Cyber Certification (DCC) and Government Standard (GovS) 007
Relevant academic or professional qualifications, such as, an MSc in cyber security or related specialism, Cyber Essentials Assessor, Cyber Assurance Assessor, CISM, CISSP, PCIRM or ISO/IEC 27001 Lead Implementer or Lead Auditor certification
Hold, or are actively working towards, Principal or Chartered Cyber Security Professional (ChCSP) status
Eligible to work in the UK and able to obtain and maintain UK security clearances
Flexibility to work from home, FSP office locations or at times visit client sites

Job Responsibility

Lead cyber governance, risk and compliance engagements, applying strong knowledge of cyber threats, risks, controls and mitigations to deliver effective security outcomes
Engage with clients to understand their threat landscape and business context, conducting risk and compliance assessments against recognised frameworks (e.g. ISO 27001, NIST, SOC 2)
Design, review and advise on the implementation and adoption of information security policies, standards, procedures and frameworks
Lead cyber and third-party risk assessments, evaluate supplier security posture, and provide risk-based recommendations for supplier selection and oversight
Identify control gaps, document findings, and track remediation activities to support assurance and audit outcomes
Produce clear, concise risk and compliance reports for executive and C-suite stakeholders, including prioritised mitigation strategies and improvement roadmaps
Contribute to thought leadership and continuous improvement by staying current with industry developments and sharing knowledge across the cyber security community
Demonstrate strong communication, stakeholder management and mentoring skills, upholding the highest standards of integrity and professionalism

What we offer

A collaborative and supportive environment in which you can grow and develop your career
The tools and opportunity to do work you can be proud of
A chance to work alongside some of the best people in the industry, who always seek to share their knowledge and experience
Hybrid working – we empower you to make smart choices about when and where to work to achieve great results
Industry leading coaching and mentoring
Plus the excellent benefits package we offer at FSP

Fulltime

Senior Security Consultant

As a Senior Security Technical Architect at NTT DATA, you will design complex se...

Location

Philippines , Metro Manila

Salary:

Not provided

NTT DATA

Expiration Date

Until further notice

Requirements

Possess at least 8 years of working experience related to information security consulting with a minimum of 5 years of hands-on experiences on GRC practice areas
Required degree level education, or significant experience and track record with tertiary qualifications on relevant domains, including computer science, computer engineering and information security
Information security and audit certifications such as ISO 27001 LI, ISO 27001 LA, CISA, CRISC, CISSP
Experienced in supporting consulting pre-sales work (e.g. writing SoWs, proposals etc.)
Demonstrate excellent skills in structured problem solving techniques, creativity and intelligence in the development of solutions to customer problems
Be self-motivated and self-disciplined with a demonstrable and successful track record in delivering consultancy projects to all sizes of organizations
Must have good presentation skills with the ability to present to audiences of both business and IT stakeholders
Must have good written communication and report writing skills
Must be a good team player
Demonstrates commitment to delivering projects within time and in budget and to a high level of client satisfaction

Job Responsibility

Deliver and lead GRC (Governance, Risk and Compliance) security consulting projects covering the following key areas: ISMS (ISO27001) Advisory
Security Maturity/Posture Assessments
Third party security assessments
Cloud Security posture assessments
Risk assessments
PCI DSS Gap Analysis
Security compliance assessments
Information security framework design (policies, processes and procedures)
Support security consulting pre-sales work (e.g. writing SoWs, proposals etc.)
Be flexible to acquire new skills and show willingness in learning/re-learning and un-learning things as needed for the success of this role and the overall security consulting practice

Fulltime

Senior Security Consultant

Job Title: Senior Security Consultant. Role Overview: You will be engaged in tas...

Location

Japan , Tokyo

Salary:

Not provided

Skyhigh Security

Expiration Date

Until further notice

Requirements

More than 3 years working experience
At least 1 year of experience in one or more of the following security-related tasks: CSIRT support (regulation revision, security planning, security education, security helpdesk, incident response, forensics, malware analysis, etc.), SOC support related (log analysis using SIEM, packet analysis, vulnerability response, etc.), IT/OT Security Assessment, Investigative research on cyber security and information security, Vulnerability diagnosis, penetration test, etc work experience
More than 2 years of experience in IT area such as system design/construction, cloud, etc. (required)
One or more years of security consulting experience preferred
It is preferable to have experience in multiple security consulting projects or pre-sales for multiple security-related services
Strong desire to learn about cyber security and information security (required)
Communication and coordination skills with stakeholders including customers (At the moment, it is necessary to have a desire to acquire at least.)
Passed the Basic Information Technology Engineer Examination (passing is desirable, but there is no problem if you have the same level of knowledge)
Business level Japanese proficiency (reading, writing, speaking) is required
Business level English proficiency (reading, writing and speaking) preferred. (If you are not comfortable with English when joining the company, there is no problem.)

Job Responsibility

You will be engaged in tasks such as CSIRT support (including incident response), SOC support, security assessment, research, vulnerability diagnosis, and penetration testing for customers in government agencies, critical infrastructure companies, finance, and manufacturing industries as a team member
Depending on your background and security career aspirations, you will be responsible for 2-3 areas of the above duties to improve your own security skills after consulting with your manager
Responsible for everything from pre-sales to delivery
Our work is on a per-project basis. There is a possibility that you will be engaged in a short-term project of about 3 months or a long-term project that spans several years. In many cases, a team (3-4 people) is formed to proceed
Three months after joining the company is the OJT period. While receiving support from managers and mentors, you will use the OJT period to catch up on delivery projects and pre-sales that you participate in.

What we offer

Retirement Plans
Medical, Dental and Vision Coverage
Paid Time Off
Paid Parental Leave
Support for Community Involvement

Fulltime

Senior Associate Security Consultant OT Security

The Senior Associate Security Consultant is responsible for developing expertise...

Location

India , Mumbai

Salary:

Not provided

NTT DATA

Expiration Date

Until further notice

Requirements

Bachelor's degree or equivalent in Information Technology or Computer Science or Engineering or related field
Industry relevant certifications such as CISSP, CISM, CEH, GSEC or CompTIA Security+ essential
Moderate level of demonstrable experience in the Information Technology Security Industry or relevant experience in similar role within a related environment
Moderate level of experience with security architecture design principles
Moderate level of experience with industry compliance and standards such as ISO 27000, PCI:DSS, NIST, HIPAA or others
Moderate level of experience with security tools and techniques to cover SANS Top 25, OWASP or others
Strong interest in cybersecurity and a desire to learn and grow in the field
Knowledge of basic cybersecurity concepts, principles, and best practices
Familiarity with common security tools and technologies is a plus
Excellent analytical and problem-solving skills

Job Responsibility

Assists in conducting security assessments, vulnerability scans, and penetration tests to identify weaknesses in client systems
Analyzes security data, logs, and reports to detect and investigate security incidents or anomalies
Prepares and maintains documentation, including security assessment reports, findings, and recommendations
Collaborates with senior consultants to provide advice and support to clients on security best practices and risk mitigation strategies
Learns and uses various security tools and technologies for assessments and monitoring
Stays updated on the latest cybersecurity threats, vulnerabilities, and industry best practices
Assists in evaluating client systems for compliance with industry standards (e.g., ISO 27001, NIST) and regulatory requirements
Communicates effectively with clients to understand their security needs and concerns
Participates in training programs and certifications to develop expertise in cybersecurity

Fulltime

Senior Security Consultant, Emergent Threat & Exploit Researcher

Do you enjoy attacking networks? Do you enjoy sifting through large amounts of a...

Location

United Kingdom

Salary:

Not provided

Rapid7

Expiration Date

Until further notice

Requirements

5+ years in an active technical security role & 4+ years Penetration Testing Consulting experience
Expert knowledge of Modern penetration testing tools and methods
Expert knowledge of Network and web-based application security concepts
Expert knowledge of Windows/Linux/UNIX internals
Expert knowledge of Exploit research and development
Experience using multiple interpreted languages (Ruby, Python, PHP, etc.) and compiled languages (Java, C, C++, Assembly, etc.)
Technical competencies, including previous technical consulting experience
High quality report writing and peer reviewing
Strong knowledge of common regulatory structures and obligations and common I.T. governance
The ability to effectively lead teams of penetration testers while on engagements

Job Responsibility

Deliver Rapid7’s Vector Command Continuous Red Teaming service
Investigate emerging threats, uncover novel vulnerabilities across large external attack surfaces, and attempt to breach customer perimeter defenses to gain initial access
When new N-day or zero-day vulnerabilities emerge, rapidly analyze them, recreate proof-of-concepts, and assess customer environments for exposure
Actively hunt for novel vulnerabilities and unique attack paths across customer attack surfaces to support initial access operations
Evaluate large external attack surfaces to identify vulnerabilities that enable initial access
Collaborate closely with a team of Red Team operators, participating in daily meetings to establish attack objectives and operational direction
Analyze, develop, and exploit N-day and newly released zero-day vulnerabilities relevant to customer environments
Identify novel attacks through black-box evaluation of customer web applications, leading to initial access or exposure of sensitive data
Develop and maintain positive relationships with clients and understand their business and needs
Participate in industry conferences and professional organizations

New

Senior Security Consultant (DevSecOps)

The primary responsibility of the Security Services Consultant - DevSecOps is to...

Location

France , Paris

Salary:

Not provided

Palo Alto Networks Italia

Expiration Date

Until further notice

Requirements

Bachelor’s Degree in Computer Science or similar field
Two or more years of experience in a technical / implementation role deploying enterprise software
Two or more years of experience in a developer role
Demonstrable knowledge of Information Security and Network Architecture concepts
Familiarity with software lifecycle and orchestration tooling
Demonstrated ability to assume sole and independent responsibilities
Ability to keep track of numerous detail-intensive, independent tasks and ensure accurate completion
Ability to train technical users
Ability to conduct technical presentations
Experience with UNIX operating systems

Job Responsibility

Lead on-site and remote implementations and onboarding engagements with customers
Assist customers with developing, managing, and executing project plans and timelines
Assist customers with integration patterns with developer pipeline and orchestration tooling
Help maintain customer relationships and identify opportunities for growth
Collaborate in the ongoing development of training materials and curricula
Collaborate and mentor the team on consulting and development activities
Support the Security Services - DevSecOps team by assisting with technical escalations support duties
Collaborate with other CyberArk departments to ensure coordination and completion of all additional implementation-related tasks

Fulltime

New

Senior Security Consultant (DevSecOps)

Location

France , Paris

Salary:

Not provided

Palo Alto Networks

Expiration Date

Until further notice

Requirements

Bachelor’s Degree in Computer Science or similar field
Two or more years of experience in a technical / implementation role deploying enterprise software
Two or more years of experience in a developer role
Demonstrable knowledge of Information Security and Network Architecture concepts
Familiarity with software lifecycle and orchestration tooling
Demonstrated ability to assume sole and independent responsibilities
Ability to keep track of numerous detail-intensive, independent tasks and ensure accurate completion
Ability to train technical users
Ability to conduct technical presentations
Experience with UNIX operating systems

Job Responsibility

Lead on-site and remote implementations and onboarding engagements with customers
Assist customers with developing, managing, and executing project plans and timelines
Assist customers with integration patterns with developer pipeline and orchestration tooling
Help maintain customer relationships and identify opportunities for growth
Collaborate in the ongoing development of training materials and curricula
Collaborate and mentor the team on consulting and development activities
Support the Security Services - DevSecOps team by assisting with technical escalations support duties
Collaborate with other CyberArk departments to ensure coordination and completion of all additional implementation-related tasks
Up to 30% travel

Fulltime

Select Country

Senior Security Consultant

Job Description

Job Responsibility

Requirements

Nice to have

What we offer

Looking for more opportunities?

Senior Security Consultant

Senior Security Consultant

Senior Security Consultant

Senior Security Consultant

Senior Security Consultant

Senior Associate Security Consultant OT Security

Senior Security Consultant, Emergent Threat & Exploit Researcher

Senior Security Consultant (DevSecOps)

Senior Security Consultant (DevSecOps)

Our AI answers in your language