IT Security Consultant - 100% Remote

Project overview

Project Goal:

The external expert will take over standardized, recurring, process-oriented, and documentation-intensive tasks. Our internal security officer will continue to focus on marketplace security, technical security decisions, architecture, demanding security reviews, and critical risks. In case of ambiguities or critical deviations, a targeted escalation will occur.

Vulnerability and Finding Management

Security Compliance and Organizational Tasks

Security of SaaS Services and External Developments

Awareness and Operational Security

Skills

What we offer

Attractive opportunities to shorten your personal payment term No more time-consuming invoicing needed Fast, reliable fee payment Conclude project contracts via electronic signature

• Review, evaluate, and escalate NexusIQ messages as needed
• Track open vulnerabilities, findings, responsible parties, and deadlines
• Organize penetration tests and coordinate with internal and external stakeholders
• Coordinate, manage, and document the progress of remediation measures
• Maintain processes and documentation for vulnerability management
• Process customer security questionnaires and improve the question catalog and processing workflow
• Document and maintain security policies and associated workflows
• Coordinate security roadmaps, OKRs, and projects, and create status reports
• Prepare reporting for the IT staff
• Create transparency of security work through ticket processes, responsible parties, and status
• Administratively manage licenses for security tools
• Coordinatively review technical and organizational measures (TOMs) for our marketplace
• Record existing SaaS tools and support structured security reviews
• Track compliance with and application of the internal TSP process
• Coordinate the integration of SaaS services into existing monitoring processes
• Organize security reviews of external developments and track findings
• Track maintenance and monitoring concepts and resulting measures
• Organizationally support company-wide security awareness
• Coordinate training, phishing simulations, and internal security news
• Accompany the introduction of 1Password and related employee training
• Review phishing emails reported by employees according to a defined process
• Review, process, and escalate alerts from SOC, Microsoft Defender, and comparable sources according to a predefined process
• Experience in vulnerability management
• Operational security and compliance work
• TOM
• Relevant tools (e.g., NexusIQ/Sonatype Lifecycle, Microsoft Defender, SOC/SIEM, Ticketing)

Project details

approx. 6 months

Utilization: up to 100% by arrangement

Remote Share: 100%

• Start: 22.10.2026
• Duration: 30.04.2027
• Remote: remote
• Location: 40212 Düsseldorf, DE
• Languages: German