Note: The job is a remote job and is open to candidates in USA. Beacon Hill is recruiting an Information Security Consultant for a senior-level consulting role supporting security assessments across cloud, infrastructure, and application environments. The consultant will identify security risks and control gaps, recommend mitigations, and advise cross-functional teams.
Responsibilities
- Conduct comprehensive security and cyber risk assessments across applications, infrastructure, cloud services, and technology solutions
- Evaluate existing security controls and identify potential vulnerabilities, control gaps, and areas of risk
- Assess security requirements across on-premises, cloud, and SaaS environments
- Review areas such as identity and access management, authentication, authorization, network security, firewalls, cloud configurations, vulnerability management, and data protection
- Perform technical and architectural security reviews for new and existing technology initiatives
- Recommend practical short- and long-term approaches for mitigating identified security risks
- Partner with application development, infrastructure, architecture, cybersecurity, and project teams to develop remediation strategies
- Document security findings, control gaps, risks, and recommended mitigation strategies
- Evaluate compensating controls when identified risks cannot be immediately remediated
- Help ensure security requirements are incorporated throughout the software development lifecycle (SDLC)
- Review application-security and DevSecOps controls, including SAST, DAST, and Software Composition Analysis (SCA)
- Apply established cybersecurity frameworks and standards when conducting assessments
- Provide security guidance and act as a trusted technical advisor to cross-functional stakeholders
- Research unfamiliar technologies and independently determine applicable security requirements and risks
Skills
- Strong professional experience in information security, cybersecurity, or IT risk management
- Demonstrated experience conducting technical security assessments and cyber risk assessments
- Broad understanding of security across cloud, infrastructure, networking, and application environments
- Strong knowledge of security controls related to: + Identity and access management + Multifactor authentication + Authentication and authorization + Network and firewall security + Vulnerability management + Cloud security + Application security + Data protection
- Experience identifying security control gaps and translating technical findings into actionable remediation recommendations
- Working knowledge of NIST Cybersecurity Framework (CSF) and/or NIST SP 800-53
- Experience working with application development, infrastructure, architecture, and project teams
- Ability to independently research technical environments, gather information from stakeholders, and make informed security recommendations
- Strong written and verbal communication skills
- Experience with or a strong understanding of:
- • Microsoft Azure and Azure security controls
- • AWS and/or Google Cloud Platform
- • Identity and access management / IAM
- • Multifactor authentication and authorization controls
- • Network security and firewalls
- • Vulnerability management technologies
- • Cloud security controls and configurations
- • SAST, DAST, and SCA technologies
- • DevSecOps practices
- • Secure Software Development Lifecycle (SDLC)
- • Security architecture and design principles
- • NIST CSF and NIST SP 800-53
- 7+ years of experience in information security, cybersecurity consulting, security architecture, or a related field
- Strong experience securing or assessing Microsoft Azure environments
- Experience developing or evaluating security/reference architectures
- Experience working within complex or regulated enterprise environments
- Familiarity with ISO 27001 or similar security standards
- Experience across multiple cloud platforms, including Azure, AWS, and/or Google Cloud Platform
- CISSP, cloud security, GIAC/SANS, or comparable security certifications are beneficial but not required
Benefits
- Medical, dental, and vision benefits, for those who meet eligibility.
- Federal and state leave programs as required by applicable agency regulations, for those who meet eligibility.
Company Overview