Security Consultant (DevSecOps)
Summary
A security consultant with a DevOps/software development background works 100% remotely (B2B, 6-month contract with prolongations) for a Dutch parking-solutions client. Day to day they clear and own the HackerOne security backlog, remediate vulnerabilities, implement continuous security monitoring, and act as the go-to security expert for internal teams.
Industry: parking solutions
Client: from the Netherlands
Remote work: 100%
Project language: English
Business trips: possible once per 6 or 12 months to Amsterdam
Project length: 6 months contract + prolongations (we’re looking for someone who’d like to stay here for longer)
FTE: full-time
Start: ASAP
Assignment type: B2B
Overview
As a Security Consultant with a strong DevOps or software development background, you will play a crucial role in addressing the urgent security challenges faced by the organization. The role demands an individual who possesses deep security knowledge and is ready to take ownership of vulnerabilities and their remediation.
Main Responsibilities
Clear the HackerOne backlog: Triage, investigate, fix, and report on accumulated findings as the first priority.
Own the security backlog going forward: Investigate, fix, report, and maintain issues without just raising alarms.
Proactively identify and remediate security risks: Address potential threats before they become critical issues.
Select and implement a platform for continuous security monitoring: Utilize tools that provide ongoing visibility into security threats.
Act as the go-to security Subject Matter Expert (SME): Be the primary contact for internal teams regarding security concerns.
Shift security posture from reactive to proactive: Establish processes and tools to catch security issues early.
Translate security expertise into the development environment: Ensure that internal teams can apply security best practices in their daily workflows.
Key Requirements
Extensive experience in cybersecurity with a focus on DevOps.
Strong understanding of software development lifecycle and security practices.
Proficient in vulnerability management and security incident response.
Experience with security monitoring tools and platforms.
Excellent communication and collaboration skills.
Nice to Have
Knowledge of specific programming languages and frameworks.
Experience with cloud security solutions.
Relevant certifications in security or DevOps.