[Remote] Security Consultant

Note: The job is a remote job and is open to candidates in USA. SAI Systems Technologies is seeking a Security Consultant to strengthen its enterprise security posture. The role assesses risks and vulnerabilities, implements security best practices, and supports compliance and operational resilience across infrastructure, operations, and asset management.

Responsibilities

• Manage and maintain enterprise IT asset inventories, ensuring security compliance throughout the asset lifecycle
• Lead security reviews for infrastructure, applications, and operational environments to identify and mitigate risks
• Perform comprehensive vulnerability assessments using industry-standard tools and coordinate remediation efforts with technical teams
• Conduct threat assessments and risk analyses to identify emerging threats and recommend appropriate mitigation strategies
• Review and approve infrastructure and application changes through established change management processes, ensuring security controls are maintained
• Develop and implement security standards, policies, and operational procedures aligned with industry best practices
• Monitor security risks across servers, networks, cloud environments, endpoints, and enterprise applications
• Collaborate with infrastructure, operations, and engineering teams to integrate security into system design, deployment, and maintenance
• Support incident response activities by analyzing security events, identifying root causes, and recommending corrective actions
• Prepare security assessment reports, risk findings, remediation plans, and executive-level recommendations
• Ensure compliance with security frameworks such as NIST, ISO 27001, CIS Controls, and organizational security policies
• Provide guidance on security architecture, operational security controls, and continuous improvement initiatives

Skills

• Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field
• 7+ years of experience in Information Security, Infrastructure Security, or Cybersecurity Consulting
• Advanced experience in:
• Asset Management
• Change Management
• Infrastructure & Operations Security
• Threat Assessment & Remediation Analysis
• Vulnerability Assessment
• Strong knowledge of enterprise security architecture, risk management, and security governance
• Experience with vulnerability management tools such as Tenable Nessus, Qualys, Rapid7, or Microsoft Defender Vulnerability Management
• Familiarity with SIEM solutions such as Splunk, Microsoft Sentinel, IBM QRadar, or similar platforms
• Experience securing Windows, Linux, cloud (Azure, AWS, or GCP), and hybrid infrastructure
• Strong understanding of security frameworks including NIST CSF, ISO 27001, CIS Controls, and OWASP
• Excellent analytical, documentation, communication, and stakeholder management skills
• Asset Management
• Change Management
• Infrastructure & Operations Security
• Threat Assessment & Remediation Analysis
• Vulnerability Assessment
• Risk Management
• Security Operations
• Incident Response
• Security Governance
• Compliance (NIST, ISO 27001, CIS)
• SIEM & Vulnerability Management Tools
• Cloud & Infrastructure Security
• Certifications such as CISSP, CISM, Security+, GSEC, CEH, or CRISC
• Experience with cloud security, identity and access management (IAM), and zero-trust security models
• Knowledge of automation and scripting using PowerShell, Python, or Bash
• Experience supporting audits, regulatory compliance, and security governance initiatives

Company Overview