Cybersecurity Consultant

Immediate Opportunity for an Experienced Cybersecurity Consultant

We are supporting an innovative Swiss SaaS company that is looking for a seasoned cybersecurity professional to strengthen its security posture following a recently contained security incident related to a partner SSO integration.

This is an ideal engagement for a hands-on Security Consultant, Security Architect, Cloud Security Specialist, or fractional CISO who enjoys working closely with engineering teams and driving pragmatic security improvements.

Location: Zug (Hybrid)
Remote with occasional on-site presence
Start: ASAP
Duration: 6-8 weeks initially
Workload: 2-3 days per week

What You'll Do

• Review incident analysis, remediation activities, and remaining security gaps
• Conduct a security assessment of the platform and cloud environment
• Evaluate authentication and authorization mechanisms, including OAuth2, OIDC, SAML, JWT, MFA, and partner SSO integrations
• Review API security, secrets management, logging, monitoring, alerting, and cloud security controls
• Assess Azure services including PostgreSQL, Redis, Storage, Private Endpoints, and Defender
• Define and coordinate external penetration testing activities
• Support responses to customer security questionnaires and audits
• Advise on requirements related to ISO 27001, NIST CSF, data residency, audit logging, backup and recovery testing, and customer audit rights
• Develop and prioritize a roadmap toward ISO 27001 readiness

Required Experience

5+ years of experience in Information Security

Strong hands-on experience with:

• Azure Cloud Security
• Microsoft Entra ID (Azure AD)
• OAuth2, OpenID Connect (OIDC), SAML, JWT
• Web and SaaS application security
• API security
• Incident response and remediation

Experience with:

• ISO 27001 implementation and/or auditing
• Security assessments and customer compliance requirements
• GDPR and Swiss Data Protection Act (nDSG)

Comfortable working directly with engineering teams in a fast-paced environment

Nice to Have

• CISSP
• CISM
• OSCP
• ISO 27001 Lead Implementer
• ISO 27001 Lead Auditor

Ideal Background

We are particularly interested in professionals who have worked as:

• Security Architect
• Cloud Security Consultant
• Information Security Consultant
• vCISO / Fractional CISO
• Application Security Consultant
• Azure Security Specialist

Experience supporting public sector, transportation, industrial, or regulated customers is highly beneficial.