Cyber Security Consultant

SoftServe is a recognized global leader in technology that advises and provides cutting-edge engineering to reveal, transform, accelerate, and optimize how enterprises and software companies do business. With over 13,000 associates, we empower talented people to change the world and understand the best way to build our collective future is to help build yours.

At SoftServe, our mission is to enable talented people to improve the world. Our Cloud & DevOps team consists of 100+ professionals. Together, we are the primary force behind SoftServe Cloud & DevOps Technology Capabilities and Partnerships. As a part of the AWS Cluster, you will continuously contribute to our AWS Partnership and help design, incubate, and ramp up capabilities for delivering AWS and Hybrid Cloud solutions.

RESPONSIBILITIES

• To lead the design and continuous evolution of modern Security Assessment Services, driving impactful improvements in how assessments adapt to changing technologies and emerging threats in close collaboration with client and internal stakeholders
• To take ownership of translating clients’ business objectives, technology landscapes, security challenges, and risk profiles into Cyber Security strategies and security architectures that measurably reduce risk and strengthen overall security posture
• To collaborate closely with clients, engineering teams, sales, and delivery groups to co-create security solutions, align on requirements, and ensure that proposed architectures and roadmaps are technically feasible and business-relevant
• To design holistic security solutions across Cloud, hybrid, infrastructure, network, application, data, identity, and DevOps environments, ensuring consistent and aligned protection across all layers of the technology stack
• To conduct and continuously enhance security architecture assessments, training sessions, maturity assessments, threat modeling, risk assessments, and technology evaluations that inform security decisions and improvement plans
• To define and document security architecture principles, reference architectures, technical controls, implementation roadmaps, and remediation plans that guide secure solution delivery and risk reduction initiatives
• To design and articulate Zero Trust, IAM, network security, workload protection, data protection, application security, and security monitoring capabilities that address specific customer requirements and threat scenarios
• To integrate security throughout software and infrastructure delivery processes by applying DevSecOps practices, Infrastructure as Code, policy as code, and security automation to embed controls early and consistently
• To establish and refine vulnerability management, attack-surface management, detection, response, and remediation processes that enable continuous identification and treatment of security weaknesses
• To cooperate with sales and delivery teams during pre-sales activities, including running discovery workshops, contributing to solution design, performing technical feasibility assessments, and preparing proposals and effort estimations
• To lead the end-to-end security solution design lifecycle, from requirements gathering and risk analysis through detailed architecture definition and implementation planning, ensuring traceability to client objectives and risks
• To provide technical leadership and mentorship to engineering teams, reinforcing adherence to defined security architecture principles and recognized industry best practices throughout delivery
• To identify technical and security risks early in engagements and proactively define, communicate, and validate mitigation strategies that align with client risk appetite and priorities
• To conduct structured technology assessments and recommend suitable security platforms, products, frameworks, and approaches that best fit customers’ requirements and environments
• To build AI Security Harnesses for Infrastructure Protection that combine relevant security capabilities and approaches to safeguard infrastructure within the assessed technology landscape

REQUIREMENTS

• Extensive experience with 5+ years in Cyber Security roles such as Security Architect, Cyber Security Consultant, Cloud Security Architect, Security Engineer, or similar positions
• Strong knowledge of security architecture principles, threat modeling, risk assessment, security controls, and defense-in-depth approaches
• Practical experience creating security architecture visions, technical specifications, diagrams, security requirements, risk assessments, and implementation roadmaps
• Proven experience leading technical teams, decomposing complex security initiatives into actionable, prioritized tasks and deliverables
• Strong understanding of on-premises infrastructure requirements, hyperscaler cloud platforms, their native security services, and cloud security best practices
• Solid understanding of Identity and Access Management (IAM), Zero Trust concepts, privileged access management (PAM), secrets management, PKI, encryption, and key management
• Strong proficiency with network security concepts and technologies, including segmentation, firewalls, WAF, VPN, IDS/IPS, DNS security, and secure connectivity patterns
• Practical experience with Kubernetes, container platforms, and cloud-native security tooling and practices
• Practical experience integrating security into CI/CD pipelines and implementing DevSecOps practices across the software delivery lifecycle
• Strong understanding of security monitoring and operations technologies such as SIEM, SOAR, EDR/XDR, CNAPP, CSPM, CWPP, and vulnerability management platforms
• Hands-on experience with security posture management, attack-surface management, vulnerability assessment, and remediation processes
• Strong knowledge of security frameworks and standards such as NIST CSF, ISO 27001, CIS Controls and Benchmarks, MITRE ATT&CK, OWASP, or equivalent industry frameworks
• Strong ability to translate business requirements and risk profiles into practical security architectures, technical controls, and actionable recommendations
• Relevant security and cloud certifications such as CISSP, CCSP, AWS Certified Security, AWS Solutions Architect, Azure Cybersecurity Architect, or Google Professional Cloud Security Engineer (nice-to-have)

SoftServe is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment regardless of race, color, religion, age, sex, nationality, disability, sexual orientation, gender identity and expression, veteran status, and other protected characteristics under applicable law.

#J-18808-Ljbffr