Senior Security Consultant

Location: Remote - U.S. preferred (Pacific Time Zone)
Employment Type: Full-time Contractor (B2B)
Schedule: 40 hours/week

Hey! We're Scale Up Recruiting Partners, and our client is looking for an experienced Senior Security Consultant to lead technical security engagements across multiple clients.

This is a hands-on, client-facing role focused on cloud security, application security, infrastructure security, and technical security assessments. You'll independently manage projects from scoping through delivery, working directly with engineering teams and client stakeholders.

• Lead cloud security assessments, IAM reviews, network security, and hardening across AWS, GCP, and Azure.

• Conduct application security reviews, threat modeling, and CI/CD security assessments.

• Implement and manage security tools, including EDR, SIEM, CSPM, and vulnerability scanners.

• Design security roadmaps, architectures, and technical controls aligned with SOC 2, ISO 27001, and HIPAA.

• Manage client engagements, lead meetings, and deliver actionable security recommendations.

• Prepare high-quality technical reports, security documentation, and remediation plans.

• 5–7 years of hands-on cybersecurity experience, with strong technical delivery skills.

• Mandatory consulting or professional services experience, including managing multiple clients and leading engagements independently.

• Deep technical expertise in at least two of the following:

  • Cloud Security: AWS, GCP, Azure, IAM, networking, and security hardening.

  • Application Security: Secure SDLC, threat modeling, code review, and CI/CD security.

  • Infrastructure Security: Kubernetes, containers, IaC, and secrets management.

  • Detection & Response: EDR, SIEM, vulnerability management, and incident response.

• Working knowledge of SOC 2 Type II and ISO 27001, including hands-on implementation of technical controls.

• Excellent technical writing and documentation skills.

• Professional-level English, both written and spoken, for daily communication with U.S.-based clients.

Nice to Have

• Certifications such as CISSP, OSCP, or AWS Security Specialty.

• Experience leading security engagements end-to-end, from initial assessment through implementation.