Cybersecurity Consultant
Core
Perform security risk assessments, vulnerability analysis, and compliance reviews for government projects across on-premise, cloud, and IoT environments.
Role type
Cybersecurity Consultant (IC)
Builds
Security risk reports, remediation recommendations, and compliance documentation for government clients.
Domain
Government sector, Cloud Security, Application Security, Risk Management
Deliverable
client delivery
Required skills
Security risk assessment, vulnerability assessment, security policy review, application security testing, cloud security configuration review, threat modelling, regulatory compliance analysis, project management, analytical problem solving
Preferred skills
CISSP, CISM, CISA, STRIDE methodology, PASTA methodology, NIST framework, ISO 27001, AWS, Azure, GCP
Technologies
AWS, Azure, GCP
Responsibilities
Support the execution of security risk assessments across various environments including on-premise, cloud, DevOps, IoT, and third-party systems; Assist in performing vulnerability assessments, analyzing findings, and documenting remediation recommendations; Contribute to the review of security policies, standards, and procedures; Participate in application security activities such as secure code reviews, threat modelling, and CI/CD pipeline assessments; Support cloud security assessments, including configuration reviews, access controls, and data protection practices; Assist in System Security Acceptance Testing (SSAT) by executing test scenarios, analyzing results, and documenting security gaps; Document security findings, assist in preparing risk reports, and help maintain the security risk register.
Seniority
Mid-level, hands-on IC