Security Consultant

Stack

Responsibilities

• ▹Analyzing clients' IT infrastructure, application environments, and security processes, identifying vulnerabilities, and developing tailored security concepts.
• ▹Advising clients on the design and implementation of IT security solutions, standards, and guidelines in complex environments.
• ▹Carrying out risk analyses and evaluations of technical measures, and supporting audits, penetration tests, and certifications (e.g. ISO 27001, BSI-Grundschutz, NIS2).
• ▹Evaluating security-relevant data from SIEM, log, and vulnerability systems, and providing technical recommendations.
• ▹Supporting the automation of standard technical processes, and advising on network security, cloud security, IAM, and SOC/SIEM.
• ▹Producing documentation such as operations manuals, incident reports, and action plans to reduce risk in future incidents.

Requirements

• ▹Solid experience in IT security consulting, ideally with direct client contact in an enterprise environment.
• ▹Ability to understand complex technical relationships and communicate them clearly, especially around network security, cloud security (Azure, AWS), and ISMS.
• ▹Good knowledge of relevant standards and frameworks such as BSI-Grundschutz, ITIL, ISO 27001, or NIST.
• ▹Ability to evaluate technical measures, derive requirements, and develop tailored solution concepts, without being involved in operational duties.

Nice to have

• ▹CISSP, CCSP, CISM, OSCP, or ISO 27001 Lead Implementer certification (a plus, not mandatory if you have comparable practical experience).

Soft skills