Cybersecurity Consultant

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Cybersecurity Consultant based in Bulgaria.

The Cybersecurity Consultant will play a hands-on role in strengthening organizational security and embedding secure development practices across software projects. You will assess existing security controls, identify vulnerabilities, and implement practical improvements across repositories, cloud environments, and CI/CD pipelines. Working closely with engineering teams, you will configure security tools, establish policies, conduct security reviews, and support regulatory compliance initiatives. A key priority will be preparing the organization for ISO/IEC 27001 certification while building a sustainable security framework. You will also mentor an internal Security Lead and help developers adopt security best practices. This is a part-time, fully remote opportunity offering significant flexibility and the chance to shape security operations within an international software environment.

Accountabilities

In this role, you will take direct ownership of security improvements, combining technical implementation, governance, compliance, and team enablement. Your main responsibilities will include:

• Security assessment and governance:
• Organizational security and infrastructure:
• Secure software development:
• Regulatory compliance and certification:
• Client security services:
• Team development and knowledge sharing:

Requirements

The ideal candidate brings extensive cybersecurity experience and a strong technical background in application security, DevSecOps, and cloud security. This position requires someone who can independently implement security solutions while communicating effectively with both technical teams and management. The following qualifications are expected:

• At least 8 years of professional experience in information security, including recent hands-on experience in application security, DevSecOps, or cloud security.
• Proven ability to independently configure security tools, write pipeline configurations, review source code, test applications, and develop security policies.
• Practical experience designing and implementing Secure Software Development Lifecycle processes and integrating security tools into CI/CD pipelines.
• Strong knowledge of cloud security across at least one major cloud platform: AWS, Azure, or Google Cloud Platform (GCP).
• Experience with Kubernetes and container security.
• Understanding of security risks associated with AI and Large Language Model (LLM)-based applications.
• Ability to communicate complex security concepts and risks clearly to both engineering teams and management.
• Fluency in written and spoken English.

Additional Qualifications (Preferred)

• Experience with the EU Cyber Resilience Act (CRA), NIS2, and GDPR, particularly within software development, vendor, or supplier environments.
• Experience developing cybersecurity service offerings for clients in an agency, consulting, or outsourcing environment.
• Previous experience implementing or auditing ISO/IEC 27001 or comparable frameworks such as SOC 2.

Preferred Certifications

One or more of the following certifications would be an advantage:

• Offensive security and technical certifications: OSCP, BSCP, CDP, or CKS.
• ISO/IEC 27001 Lead Implementer or Lead Auditor.
• Cloud security certifications, such as AWS Security Specialty, AZ-500, or Google Professional Cloud Security Engineer.
• CISSP, CISM, or CSSLP.

Benefits

• Fully remote working arrangement, with the flexibility to work from anywhere with a stable internet connection.
• Part-time position with flexible working hours and the freedom to choose your preferred time zone and schedule.
• Negotiable hourly compensation based on skills and professional experience.
• Monthly payments via wire transfer for contractors.
• Paid training and professional development opportunities.
• Access to modern technologies and opportunities to work on innovative projects.
• Consistent workload with a steady flow of engaging and challenging assignments.
• Annual compensation increases based on performance.
• Opportunity to collaborate with an international team of experienced professionals.

How Jobgether Works

We use an

AI-powered matching process

to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice:

By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.