Cybersecurity Consultant

Description

The company is a global partner for AI-first digital transformation and engineering, with more than 25 years in the field, around 5,000 staff across 16 countries, and a focus on building scalable products, platforms and data-driven solutions.

Its main areas are artificial intelligence, data and cloud, intelligent automation and digital products. In Central and Eastern Europe, a team of nearly 1,000 works on modern applications, data platforms and AI solutions using AWS, Azure, GCP, Databricks and Snowflake.

An international client is strengthening information security across its engineering, IT and compliance functions, and needs a consultant for this work.

The project aims to give the client clearer visibility and control of its security. Work includes building a full inventory of APIs and endpoints, setting up an access matrix for users and applications, tightening identity and access management, and closing gaps in vulnerability management and CI/CD security.

You will report to the IT Security Manager. The role is hands-on and focused on delivery: putting controls in place, writing up processes and passing knowledge on to others. You will work with several technical teams and stakeholders and make many technical decisions yourself.

Responsibilities

• Harden CI/CD pipelines by enforcing least-privilege access, isolating build environments and keeping pipeline configuration in code.
• Integrate and tune security gates for SAST, SCA, dependency scanning, secret detection, container images and infrastructure-as-code.
• Set up secure secrets management, rotate credentials and separate CI/CD credentials appropriately.
• Improve software supply-chain security through artifact signing, SBOM generation, dependency pinning and trusted registries.
• Enforce source-control and release controls such as branch protection, mandatory reviews and protected release workflows.
• Build and maintain an authoritative inventory of APIs, endpoints and supporting infrastructure, recording owner, classification, exposure and lifecycle status.
• Map each asset to the security controls that apply to it, such as authentication, authorization, encryption, logging, monitoring and rate limiting.
• Create processes for registering new assets and review the inventory regularly for accuracy and coverage.
• Design and document an access matrix covering human users, service accounts, API clients, integrations and automated jobs.
• Apply least-privilege and segregation-of-duties principles to access assignments and define permission scopes for application-to-application access.
• Strengthen identity and access management, enforcing Single Sign-On (SSO) wherever it is technically feasible.
• Onboard assets and endpoints into Qualys, group them by risk and check scan coverage against the full inventory.
• Coordinate vulnerability triage and remediation against severity thresholds, remediation SLAs and reporting requirements.
• Document controls, procedures, findings and recommendations in English.
• Work with engineering, IT and compliance stakeholders to deliver security improvements and share knowledge.

Requirements

• Proven experience in information security, IT security or product security within complex technical environments.
• Hands-on experience with security asset management, including building and maintaining asset inventories.
• Practical experience with SAST and DAST, and with adding security testing into software delivery workflows.
• Working knowledge of API security, including the OWASP API Security Top 10, authentication and authorization models and encryption standards.
• Experience designing and documenting access control models, including RBAC and access matrices.
• Understanding of IAM principles, SSO, least-privilege access and service-account security.
• Experience with vulnerability management, including asset onboarding, scan coverage, risk-based prioritization and remediation tracking.
• Familiarity with compliance frameworks such as ISO 27001, NIS2 or SOC 2.
• Strong technical writing skills and the ability to turn security requirements into clear, usable procedures.
• Strong communication skills and the ability to work with both technical and business stakeholders.
• A hands-on, delivery-focused approach, with the independence to move tasks forward and solve problems on your own initiative.
• Professional fluency in English, since all documentation and deliverables are in English.
• Practical experience using AI-powered assistants such as Claude Code, GitHub Copilot or Cursor to improve productivity, quality or decision-making in software delivery.
• Familiarity with cloud environments, particularly AWS.
• Experience with GitHub and with securing source-control and CI/CD workflows.
• Experience with vulnerability management platforms such as Qualys.
• Familiarity with identity providers and SSO platforms such as Okta or Microsoft Entra ID.
• Experience with software supply-chain security, including SBOMs, artifact signing and dependency security.
• Experience working across several product and engineering teams in an international organization.

Conditions

The role is based in Bucharest, Romania.

Hybrid work, with 3 days per week on-site.

You must work from the European Union and hold a work permit.

Hiring steps: CV review, HR call, interview, client interview, then decision.

The company is an equal opportunity employer.