Security Consultant

About the role

As a Security Consultant, you will act as a strategic advisor in reviewing security architecture, validating threat modeling artifacts, and providing security recommendations throughout the Software Development Life Cycle (SDLC) and platform operations. You will assess security risks, prioritize identified threats, and recommend strategic remediation plans to strengthen the overall security posture of the platform.

What you’ll do

• Provide risk-based recommendations to address identified security implementation gaps.
• Provide security consultation and advisory throughout the SDLC and platform/infrastructure operations.
• Review DFDs, data flows, trust boundaries, and other security artifacts to ensure alignment with threat modeling standards.
• Develop strategic remediation plans and prioritize security risks for identified threats.
• Assess security risks and recommend mitigations based on business impact and operational requirements.

What you’ll bring

• Bachelor’s degree in Information Technology, Cybersecurity, or a related field.
• Minimum 5+ years of experience in Information Security Consulting, Security Architecture, or Risk Assessment.
• Strong knowledge of threat modeling methodologies such as STRIDE, PASTA, DREAD, and MITRE ATT&CK.
• Familiarity with threat modeling tools such as Microsoft Threat Modeling Tool, OWASP Threat Dragon, or IriusRisk.
• Strong understanding of microservices, API gateways, large-scale system integration, and cloud-native/hybrid architectures.
• Knowledge of UU PDP No. 27/2022, ISO/IEC 27001, and NIST Cybersecurity Framework.
• Strong risk assessment and prioritization skills, with the ability to balance security effectiveness and business/operational requirements.
• Certifications such as CISSP, CISM, CISA, CCSP, or CDPO are an advantage.

Skills

Similar roles