Remote Cybersecurity Consultant
Scopic · Engineering · Senior · 1d ago
Anyone, anywhere in the world can apply.
Applies on the original listing · via Himalayas
Who can apply
Read straight from the listing, so you know before you spend time on it.
Anyone, anywhere in the world can apply.
“As long as you have a stable internet connection and the drive to thrive, you can travel and work from anywhere you like.”
Remote professionals working from around the world across flexible hours and chosen time zones.
- Async-first
- The listing doesn't promise async-first working.
- Contractor / B2B
- Hires remote contractors paid monthly via wire transfer.
- Global stipend
- No home office or equipment budget mentioned.
- Annual retreat
- No company-paid get-togethers mentioned.
Read from the listing automatically. Always confirm the details with the company before you accept an offer.
About the role
In this part-time, hands-on role, you will work directly inside repositories, CI/CD pipelines, and cloud environments alongside engineers. You will design and execute security policies, run maturity assessments, configure security tooling, and guide the company toward ISO/IEC 27001 certification while mentoring an internal Security Lead.
What you'll do
- Run security maturity assessments and establish core security policies, risk registers, and governance metrics.
- Enforce SSO, MFA, secrets management, laptop baseline hardening, and lead tabletop incident response exercises.
- Build standard Secure SDLC processes and integrate automated security scanning (SAST, SCA, DAST, IaC) into CI/CD pipelines.
- Conduct internal security testing, code reviews on high-risk changes, and prepare hands-on for ISO/IEC 27001 certification.
- Work alongside the internal Security Lead and run security training workshops for engineering teams.
What you bring
- 8+ years of hands-on experience in information security, application security, DevSecOps, or cloud security.
- Proven ability to configure security tools, write pipeline configurations, review code, and draft security policies.
- Practical knowledge of cloud security in AWS, Azure, or GCP, plus Kubernetes and container security.
- Familiarity with security risks in AI and LLM-based applications.
- Fluent written and spoken English.
About Scopic
Scopic is a global custom software development and IT services company with a fully distributed team working from around the world.
View Scopic profile & open roles →