[Remote] Infosec Consultant - Remote USA

Note: The job is a remote job and is open to candidates in USA. Beacon Hill is recruiting an Information Security Consultant for a senior-level consulting role supporting security assessments across cloud, infrastructure, and application environments. The consultant will identify security risks and control gaps, recommend mitigations, and advise cross-functional teams.

Responsibilities

• Conduct comprehensive security and cyber risk assessments across applications, infrastructure, cloud services, and technology solutions
• Evaluate existing security controls and identify potential vulnerabilities, control gaps, and areas of risk
• Assess security requirements across on-premises, cloud, and SaaS environments
• Review areas such as identity and access management, authentication, authorization, network security, firewalls, cloud configurations, vulnerability management, and data protection
• Perform technical and architectural security reviews for new and existing technology initiatives
• Recommend practical short- and long-term approaches for mitigating identified security risks
• Partner with application development, infrastructure, architecture, cybersecurity, and project teams to develop remediation strategies
• Document security findings, control gaps, risks, and recommended mitigation strategies
• Evaluate compensating controls when identified risks cannot be immediately remediated
• Help ensure security requirements are incorporated throughout the software development lifecycle (SDLC)
• Review application-security and DevSecOps controls, including SAST, DAST, and Software Composition Analysis (SCA)
• Apply established cybersecurity frameworks and standards when conducting assessments
• Provide security guidance and act as a trusted technical advisor to cross-functional stakeholders
• Research unfamiliar technologies and independently determine applicable security requirements and risks

Skills

• Strong professional experience in information security, cybersecurity, or IT risk management
• Demonstrated experience conducting technical security assessments and cyber risk assessments
• Broad understanding of security across cloud, infrastructure, networking, and application environments
• Strong knowledge of security controls related to: + Identity and access management + Multifactor authentication + Authentication and authorization + Network and firewall security + Vulnerability management + Cloud security + Application security + Data protection
• Experience identifying security control gaps and translating technical findings into actionable remediation recommendations
• Working knowledge of NIST Cybersecurity Framework (CSF) and/or NIST SP 800-53
• Experience working with application development, infrastructure, architecture, and project teams
• Ability to independently research technical environments, gather information from stakeholders, and make informed security recommendations
• Strong written and verbal communication skills
• Experience with or a strong understanding of:
• • Microsoft Azure and Azure security controls
• • AWS and/or Google Cloud Platform
• • Identity and access management / IAM
• • Multifactor authentication and authorization controls
• • Network security and firewalls
• • Vulnerability management technologies
• • Cloud security controls and configurations
• • SAST, DAST, and SCA technologies
• • DevSecOps practices
• • Secure Software Development Lifecycle (SDLC)
• • Security architecture and design principles
• • NIST CSF and NIST SP 800-53
• 7+ years of experience in information security, cybersecurity consulting, security architecture, or a related field
• Strong experience securing or assessing Microsoft Azure environments
• Experience developing or evaluating security/reference architectures
• Experience working within complex or regulated enterprise environments
• Familiarity with ISO 27001 or similar security standards
• Experience across multiple cloud platforms, including Azure, AWS, and/or Google Cloud Platform
• CISSP, cloud security, GIAC/SANS, or comparable security certifications are beneficial but not required

Benefits

• Medical, dental, and vision benefits, for those who meet eligibility.
• Federal and state leave programs as required by applicable agency regulations, for those who meet eligibility.

Company Overview