Cybersecurity Consultant

Project overview

Immediate Opportunity for an Experienced Cybersecurity Consultant

We are supporting an innovative Swiss SaaS company that is looking for a seasoned cybersecurity professional to strengthen its security posture following a recently contained security incident related to a partner SSO integration.

This is an ideal engagement for a hands-on Security Consultant, Security Architect, Cloud Security Specialist, or fractional CISO who enjoys working closely with engineering teams and driving pragmatic security improvements.

Responsibilities

Required Experience

5+ years of experience in Information Security

Strong hands-on experience with:

Experience with:

Comfortable working directly with engineering teams in a fast-paced environment

• Review incident analysis, remediation activities, and remaining security gaps
• Conduct a security assessment of the platform and cloud environment
• Evaluate authentication and authorization mechanisms, including OAuth2, OIDC, SAML, JWT, MFA, and partner SSO integrations
• Review API security, secrets management, logging, monitoring, alerting, and cloud security controls
• Assess Azure services including PostgreSQL, Redis, Storage, Private Endpoints, and Defender
• Define and coordinate external penetration testing activities
• Support responses to customer security questionnaires and audits
• Advise on requirements related to ISO 27001, NIST CSF, data residency, audit logging, backup and recovery testing, and customer audit rights
• Develop and prioritize a roadmap toward ISO 27001 readiness
• Azure Cloud Security
• Microsoft Entra ID (Azure AD)
• OAuth2, OpenID Connect (OIDC), SAML, JWT
• Web and SaaS application security
• API security
• Incident response and remediation
• ISO 27001 implementation and/or auditing
• Security assessments and customer compliance requirements
• GDPR and Swiss Data Protection Act (nDSG)

Nice to have

Ideal Background

We are particularly interested in professionals who have worked as:

Experience supporting public sector, transportation, industrial, or regulated customers is highly beneficial.

• CISSP
• CISM
• OSCP
• ISO 27001 Lead Implementer
• ISO 27001 Lead Auditor
• Security Architect
• Cloud Security Consultant
• Information Security Consultant
• vCISO / Fractional CISO
• Application Security Consultant
• Azure Security Specialist

Project details

Zug (Hybrid)

Remote with occasional on-site presence

ASAP

6-8 weeks initially

2-3 days per week

• Start: flexible
• Remote: hybrid
• Location: Zurich, 2345, CH