Remote Cybersecurity Consultant

About the role

The company enables secure development and is pursuing ISO/IEC 27001 certification. This part-time role involves hands-on security work inside repositories, pipelines and cloud accounts, alongside engineers, with the Security Lead gradually handing over day-to-day ownership.

What you'll do

• Assess security maturity and turn findings into a prioritized roadmap
• Write core security policies and procedures and maintain security backlog and risk register
• Configure SSO, MFA, access controls, and onboarding/offboarding processes
• Harden Passbolt, implement a secrets manager, and baseline cloud and laptop hardening
• Develop and roll out a Secure SDLC based on OWASP frameworks, and integrate security tools into CI/CD
• Conduct threat modeling, security code reviews, internal security testing, and coordinate external tests

What they're looking for

• 8+ years in information security with hands-on work in application security, DevSecOps or cloud security
• Hands-on ability to configure tools, write pipelines, review code and write policies
• Experience building secure development lifecycles and integrating security into CI/CD
• Strong cloud security knowledge in AWS, Azure or GCP
• Ability to explain security risks clearly to engineers and management
• Kubernetes and container security experience; knowledge of AI and LLM security risks

For applicants in Nigeria

• Remote position with worldwide eligibility; listing states worldwide eligibility, so Nigeria is eligible
• The listing does not specify a timezone requirement; confirm during interview
• Contractor status is implied as hourly paid with monthly wire transfer; confirm for Nigeria during interview