Cyber Security Consultant

About the role

The Cyber Security Consultant will strengthen the organisation’s security posture across cloud, on‑premises, identity, network, application and DevSecOps domains. The role works closely with Infrastructure, Cloud, Network, DevOps and IT teams to identify weaknesses, implement controls and drive remediation.

Key responsibilities

• Implement and improve security controls in Microsoft Azure, Google Cloud Platform and on‑premises environments.
• Support Microsoft Entra ID, Active Directory, MFA, Conditional Access and privileged access management.
• Assess and harden network segmentation, firewalls (e.g., FortiGate), VPNs and access controls.
• Perform vulnerability scanning, risk prioritisation, remediation coordination and validation.
• Manage cryptographic keys, certificates, encryption and secrets using HashiCorp Vault, Azure Key Vault or GCP Secret Manager.
• Evaluate API security, authentication, authorisation, encryption and gateway configurations.
• Integrate security into CI/CD pipelines with SAST, dependency scanning, secrets detection, container and IaC security.
• Review Terraform and Infrastructure‑as‑Code configurations for security compliance.
• Support incident response, security investigations and post‑incident lessons learned.
• Contribute to security policies, standards, hardening baselines and technical documentation.

Required profile

• Bachelor’s degree in Cybersecurity, IT, Computer Science or equivalent practical experience.
• 2–4 years of hands‑on experience in security engineering, cloud or infrastructure security.
• Strong analytical, problem‑solving and communication skills in English.
• Practical understanding of networking, identity, cryptography, secrets management and API security.

Required skills

• Microsoft Entra ID, Active Directory, MFA, Conditional Access.
• Microsoft Azure, Google Cloud Platform (GCP).
• HashiCorp Vault, Azure Key Vault, GCP Secret Manager.
• Cryptography, PKI, certificates, encryption, key management.
• API security and API gateways.
• Windows and Linux infrastructure, network segmentation.
• FortiGate or equivalent enterprise firewalls.
• Vulnerability scanning and management tools.
• Terraform and Infrastructure as Code (IaC).
• DevSecOps, CI/CD security, SAST, dependency scanning.
• Security monitoring and incident response.
• Python, PowerShell, Bash scripting.