Senior Security Consultant

Location: Remote - U.S. preferred (Pacific Time Zone)
Employment Type: Full-time Contractor (B2B)
Schedule: 40 hours/week

About the Role

Hey! We're Scale Up Recruiting Partners, and our client is looking for an experienced Senior Security Consultant to lead technical security engagements across multiple clients.

This is a hands-on, client-facing role focused on cloud security, application security, infrastructure security, and technical security assessments. You'll independently manage projects from scoping through delivery, working directly with engineering teams and client stakeholders.

What You'll Do

• Lead cloud security assessments, IAM reviews, network security, and hardening across AWS, GCP, and Azure.

• Conduct application security reviews, threat modeling, and CI/CD security assessments.

• Implement and manage security tools, including EDR, SIEM, CSPM, and vulnerability scanners.

• Design security roadmaps, architectures, and technical controls aligned with SOC 2, ISO 27001, and HIPAA.

• Manage client engagements, lead meetings, and deliver actionable security recommendations.

• Prepare high-quality technical reports, security documentation, and remediation plans.

What We're Looking For

• 5–7 years of hands-on cybersecurity experience, with strong technical delivery skills.

• Mandatory consulting or professional services experience, including managing multiple clients and leading engagements independently.

• Deep technical expertise in at least two of the following:

  • Cloud Security: AWS, GCP, Azure, IAM, networking, and security hardening.

  • Application Security: Secure SDLC, threat modeling, code review, and CI/CD security.

  • Infrastructure Security: Kubernetes, containers, IaC, and secrets management.

  • Detection & Response: EDR, SIEM, vulnerability management, and incident response.

• Working knowledge of SOC 2 Type II and ISO 27001, including hands-on implementation of technical controls.

• Excellent technical writing and documentation skills.

• Professional-level English, both written and spoken, for daily communication with U.S.-based clients.

Nice to Have

• Certifications such as CISSP, OSCP, or AWS Security Specialty.

• Experience leading security engagements end-to-end, from initial assessment through implementation.