Cybersecurity Consultant

We are looking for a Security Consultant to provide strategic security guidance across the Software Development Life Cycle (SDLC) and platform operations. In this role, you will review security architecture, validate threat modeling artifacts, assess potential risks, and recommend effective remediation strategies to strengthen the organization's overall security posture.

Responsibilities

- Provide risk-based security recommendations to address identified security gaps and vulnerabilities.

- Deliver security consultation and advisory throughout the SDLC and platform/infrastructure operations.

- Review Data Flow Diagrams (DFDs), data flows, trust boundaries, and security artifacts to ensure alignment with threat modeling standards.

- Develop strategic remediation plans and prioritize identified security threats based on risk severity.

- Assess security risks and recommend appropriate mitigation strategies considering business impact and operational requirements.

- Collaborate with technical and cross-functional teams to support secure system design and implementation.

Requirements

- Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field.

- Minimum 5 years of experience in Information Security Consulting, Security Architecture, or Risk Assessment.

- Strong knowledge of threat modeling methodologies such as STRIDE, PASTA, DREAD, and MITRE ATT&CK.

- Familiarity with threat modeling tools such as Microsoft Threat Modeling Tool, OWASP Threat Dragon, or IriusRisk.

- Strong understanding of microservices, API gateways, large-scale system integration, and cloud-native/hybrid architectures.

- Knowledge of Law No. 27 of 2022 on Personal Data Protection (UU PDP), ISO/IEC 27001, and NIST Cybersecurity Framework.

- Strong risk assessment, analytical, and prioritization skills, with the ability to balance security requirements and business objectives.

- Professional certifications such as CISSP, CISM, CISA, CCSP, or CDPO are an advantage.