Infosec Consultant - Remote USA

Information Security ConsultantLocation: Remote / Flexible LocationType: Contract, with potential for extension and possible conversionDuration: Initial 3-6 months, with potential extensionPosition OverviewWe are seeking an experienced Information Security Consultant to support security assessments across cloud, infrastructure, and application environments. This individual will evaluate existing and proposed technology solutions, identify security risks and control gaps, and provide practical recommendations to reduce risk and strengthen overall security posture.This is a senior-level consulting role requiring someone who can work independently, navigate complex technical environments, and partner effectively with application development, infrastructure, architecture, project, and cybersecurity teams.Key ResponsibilitiesConduct comprehensive security and cyber risk assessments across applications, infrastructure, cloud services, and technology solutions.Evaluate existing security controls and identify potential vulnerabilities, control gaps, and areas of risk.Assess security requirements across on-premises, cloud, and SaaS environments.Review areas such as identity and access management, authentication, authorization, network security, firewalls, cloud configurations, vulnerability management, and data protection.Perform technical and architectural security reviews for new and existing technology initiatives.Recommend practical short- and long-term approaches for mitigating identified security risks.Partner with application development, infrastructure, architecture, cybersecurity, and project teams to develop remediation strategies.Document security findings, control gaps, risks, and recommended mitigation strategies.Evaluate compensating controls when identified risks cannot be immediately remediated.Help ensure security requirements are incorporated throughout the software development lifecycle (SDLC).Review application-security and DevSecOps controls, including SAST, DAST, and Software Composition Analysis (SCA).Apply established cybersecurity frameworks and standards when conducting assessments.Provide security guidance and act as a trusted technical advisor to cross-functional stakeholders.Research unfamiliar technologies and independently determine applicable security requirements and risks.Required QualificationsStrong professional experience in information security, cybersecurity, or IT risk management.Demonstrated experience conducting technical security assessments and cyber risk assessments.Broad understanding of security across cloud, infrastructure, networking, and application environments.Strong knowledge of security controls related to:Identity and access managementMultifactor authenticationAuthentication and authorizationNetwork and firewall securityVulnerability managementCloud securityApplication securityData protectionExperience identifying security control gaps and translating technical findings into actionable remediation recommendations.Working knowledge of NIST Cybersecurity Framework (CSF) and/or NIST SP 800-53.Experience working with application development, infrastructure, architecture, and project teams.Ability to independently research technical environments, gather information from stakeholders, and make informed security recommendations.Strong written and verbal communication skills.Top SkillsSecurity Assessments / Cyber Risk AssessmentsCloud Security, particularly Microsoft AzureNIST CSF / NIST SP 800-53Infrastructure, Network, and Application SecuritySecurity Controls and Risk AnalysisSecurity Architecture ReviewsRisk Mitigation and Remediation PlanningCross-functional Technical ConsultingTools & Technology ExperienceExperience with or a strong understanding of:Microsoft Azure and Azure security controlsAWS and/or Google Cloud PlatformIdentity and access management / IAMMultifactor authentication and authorization controlsNetwork security and firewallsVulnerability management technologiesCloud security controls and configurationsSAST, DAST, and SCA technologiesDevSecOps practicesSecure Software Development Lifecycle (SDLC)Security architecture and design principlesNIST CSF and NIST SP 800-53Preferred Qualifications7+ years of experience in information security, cybersecurity consulting, security architecture, or a related field.Strong experience securing or assessing Microsoft Azure environments.Experience developing or evaluating security/reference architectures.Experience working within complex or regulated enterprise environments.Familiarity with ISO 27001 or similar security standards.Experience across multiple cloud platforms, including Azure, AWS, and/or Google Cloud Platform.CISSP, cloud security, GIAC/SANS, or comparable security certifications are beneficial but not required. Beacon Hill is an equal opportunity employer and individuals with disabilities and/or protected veterans are encouraged to apply. California residents: Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. If you would like to complete our voluntary self-identification form, please click here or copy and paste the following link into an open window in your browser: https://jobs.beaconhillstaffing.com/eeoc/ Completion of this form is voluntary and will not affect your opportunity for employment, or the terms or conditions of your employment. This form will be used for reporting purposes only and will be kept separate from all other records. Company Profile: Beacon Hill Technologies, a premier National Information Technology Staffing Group, provides world class technology talent across all industries utilizing a complete suite of staffing services. Beacon Hill Technologies' dedicated team of recruiting and staffing experts consistently delivers quality IT professionals to solve our customers' technical and business needs. Beacon Hill Technologies covers a broad spectrum of IT positions, including Project Management and Business Analysis, Programming/Development, Database, Infrastructure, Quality Assurance, Production/Support and ERP roles. Learn more about Beacon Hill and our specialty divisions, Beacon Hill Associates, Beacon Hill Financial, Beacon Hill HR, Beacon Hill Legal, Beacon Hill Life Sciences and Beacon Hill Technologies by visiting www.bhsg.com. Benefits Information: Beacon Hill offers a robust benefit package including, but not limited to, medical, dental, vision, and federal and state leave programs as required by applicable agency regulations to those that meet eligibility. Upon successfully being hired, details will be provided related to our benefit offerings. We look forward to working with you. Beacon Hill. Employing the Future™