Senior Security Consultant

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Consultant based in Canada.

As a Senior Security Consultant, you will lead hands-on cybersecurity engagements, helping organizations strengthen their security posture across cloud environments, applications, and IT infrastructure. You will independently manage technical security projects from initial assessment and scoping through implementation and final delivery. Working closely with engineering teams and senior client stakeholders, you will identify vulnerabilities, assess security risks, and develop practical solutions aligned with industry standards. You will leverage your expertise across cloud security, application security, infrastructure protection, and threat detection to address complex technical challenges. This client-facing role offers the opportunity to work across multiple organizations, influence security strategies, and deliver measurable improvements. You will join a dynamic consulting environment that values technical excellence, autonomy, and the ability to turn security challenges into actionable business outcomes.

Accountabilities:

• Lead cloud security assessments across AWS, GCP, and Azure, covering identity and access management (IAM), network security, configuration reviews, and infrastructure hardening.
• Conduct application security assessments, including secure software development lifecycle (SDLC) reviews, threat modeling, code reviews, and CI/CD pipeline security evaluations.
• Assess and strengthen infrastructure security across Kubernetes, containerized environments, infrastructure as code (IaC), and secrets management.
• Implement, configure, and manage security solutions, including Endpoint Detection and Response (EDR), Security Information and Event Management (SIEM), Cloud Security Posture Management (CSPM), and vulnerability scanning tools.
• Design and recommend security architectures, technical controls, and improvement roadmaps aligned with SOC 2, ISO 27001, and HIPAA requirements.
• Independently manage multiple client engagements, taking ownership of project scoping, technical assessments, implementation activities, and final delivery.
• Collaborate directly with engineering teams, technical specialists, and client stakeholders to communicate findings and drive security improvements.
• Lead client meetings, present technical recommendations, and translate complex security issues into clear, actionable remediation plans.
• Produce comprehensive technical reports, security assessments, architecture documentation, and implementation guidelines.

Requirements:

• 5–7 years of hands-on experience in cybersecurity, information security, or technical security consulting, with a strong track record of delivering technical projects.
• Mandatory previous experience in consulting or professional services, including independently managing multiple external clients and leading security engagements.
• Deep, hands-on technical expertise in at least two of the following domains:
• Cloud Security: Experience with AWS, GCP, or Azure, including IAM, cloud networking, security configurations, and infrastructure hardening.
• Application Security: Knowledge of secure SDLC practices, threat modeling, code reviews, application vulnerabilities, and CI/CD security.
• Infrastructure Security: Practical experience with Kubernetes, containers, infrastructure as code (IaC), and secrets management.
• Detection and Response: Experience with EDR, SIEM, vulnerability management, security monitoring, and incident response.
• Working knowledge of SOC 2 Type II and ISO 27001, including practical experience implementing technical security controls.
• Strong technical writing and documentation skills, with the ability to produce clear, structured security reports and remediation recommendations.
• Excellent communication and stakeholder management abilities, with professional-level written and spoken English.
• Confidence leading technical discussions and collaborating daily with U.S.-based clients.
• Ability to work autonomously, manage competing priorities, and deliver high-quality results across multiple client engagements.

Nice to Have:

• Relevant industry certifications such as CISSP, OSCP, AWS Security Specialty, or equivalent qualifications.
• Proven experience leading end-to-end security consulting engagements, from initial assessment and scoping through implementation and final delivery.

Benefits:

• Full-time, long-term independent contractor opportunity.
• 100% remote work arrangement, with preference for candidates based in the United States or Canada.
• 40-hour working week.
• Opportunity to work on diverse technical cybersecurity projects across multiple client environments.
• Direct exposure to engineering teams, technical decision-makers, and client stakeholders.
• Significant autonomy and ownership of security engagements from assessment through delivery.
• Opportunity to strengthen expertise across cloud, application, infrastructure, and enterprise security.
• Professional growth through exposure to complex security challenges, modern technologies, and industry best practices.

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1