Senior IT Security Consultant (Cybersecurity Assessments & Services) (m/f/d)

We are looking for an experienced Senior IT Security Consultant to support cybersecurity assessment and security consulting activities for a leading international client.
The consultant will be responsible for performing security assessments, analyzing security risks, supporting security architecture decisions, and providing recommendations to improve the customer’s overall security posture.
The service delivery will be performed remotely from Austria. Occasional on-site presence may be required depending on specific customer engagements.
Location: Austria (Remote)
Contract Type: B2B Contractor / Freelance Engagement
Duration: 5 months (extension possible)
Working Time: Full-time (40 hours/week)
Language: German language skills (business fluent)
Responsibilities:

Perform technical IT security assessments for infrastructure, systems, applications, and cloud environments

Conduct security checkups, vulnerability assessments, and risk analyses

Perform threat modeling and identify potential security risks

Evaluate cloud architectures regarding security requirements and protection needs

Support the design and improvement of IT security architectures

Develop technical security concepts, guidelines, and documentation

Support Security Incident Management activities

Support penetration testing activities and security testing processes

Perform internal and external infrastructure security assessments

Support implementation of security hardening measures for systems, networks, and applications

Support technical audits and compliance activities

Assist with Information Security Management System (ISMS) activities

Required Skills & Experience:

Minimum 3 years of professional experience in IT Security (5+ years preferred)

Strong practical experience with cybersecurity assessments and security consulting

Good knowledge of TCP/IP and network security concepts

Experience with:

Firewalls

VPN

Internet Security

Identity and Access Management (IAM)

Public Key Infrastructure (PKI)

Encryption technologies

Intrusion Detection / Prevention Systems (IDS/IPS)

Web and Proxy Security

Knowledge of security standards and frameworks, including ISO 27001

Experience with Information Security Management Systems (ISMS)

Experience with risk assessments and threat modeling

Ability to create technical security documentation and recommendations

Nice-to-Have Skills

Cloud Security experience (Azure, AWS, GCP)

Penetration Testing experience

Vulnerability Management

IEC 62443 knowledge

ITIL knowledge

Security Audit experience

Static Code Analysis experience

Certifications (Advantage)

CISSP

CISM

CEH

ISO 27001 Lead Auditor

ISO 27001 Lead Implementer

Originally posted on Himalayas