Job Description

We are looking for an experienced Senior IT Security Consultant to support cybersecurity assessment and security consulting activities for a leading international client.

The consultant will be responsible for performing security assessments, analyzing security risks, supporting security architecture decisions, and providing recommendations to improve the customer’s overall security posture.

The service delivery will be performed remotely from Austria. Occasional on-site presence may be required depending on specific customer engagements.

Location: Austria (Remote)
Contract Type: B2B Contractor / Freelance Engagement
Duration: 5 months (extension possible)
Working Time: Full-time (40 hours/week)
Language: German language skills (business fluent)

Responsibilities:

• Perform technical IT security assessments for infrastructure, systems, applications, and cloud environments

• Conduct security checkups, vulnerability assessments, and risk analyses

• Perform threat modeling and identify potential security risks

• Evaluate cloud architectures regarding security requirements and protection needs

• Support the design and improvement of IT security architectures

• Develop technical security concepts, guidelines, and documentation

• Support Security Incident Management activities

• Support penetration testing activities and security testing processes

• Perform internal and external infrastructure security assessments

• Support implementation of security hardening measures for systems, networks, and applications

• Support technical audits and compliance activities

• Assist with Information Security Management System (ISMS) activities

Required Skills & Experience:

• Minimum 3 years of professional experience in IT Security (5+ years preferred)

• Strong practical experience with cybersecurity assessments and security consulting

• Good knowledge of TCP/IP and network security concepts

• Experience with:

  • Firewalls

  • VPN

  • Internet Security

  • Identity and Access Management (IAM)

  • Public Key Infrastructure (PKI)

  • Encryption technologies

  • Intrusion Detection / Prevention Systems (IDS/IPS)

  • Web and Proxy Security

• Knowledge of security standards and frameworks, including ISO 27001

• Experience with Information Security Management Systems (ISMS)

• Experience with risk assessments and threat modeling

• Ability to create technical security documentation and recommendations

Nice-to-Have Skills

• Cloud Security experience (Azure, AWS, GCP)

• Penetration Testing experience

• Vulnerability Management

• IEC 62443 knowledge

• ITIL knowledge

• Security Audit experience

• Static Code Analysis experience

Certifications (Advantage)

• CISSP

• CISM

• CEH

• ISO 27001 Lead Auditor

• ISO 27001 Lead Implementer