![]()
Information Security Consultant
Location: Remote / Flexible Location
Type: Contract, with potential for extension and possible conversion
Duration: Initial 3-6 months, with potential extension
Position Overview
We are seeking an experienced Information Security Consultant to support security assessments across cloud, infrastructure, and application environments. This individual will evaluate existing and proposed technology solutions, identify security risks and control gaps, and provide practical recommendations to reduce risk and strengthen overall security posture.
This is a senior-level consulting role requiring someone who can work independently, navigate complex technical environments, and partner effectively with application development, infrastructure, architecture, project, and cybersecurity teams.
Key Responsibilities
- Conduct comprehensive security and cyber risk assessments across applications, infrastructure, cloud services, and technology solutions.
- Evaluate existing security controls and identify potential vulnerabilities, control gaps, and areas of risk.
- Assess security requirements across on-premises, cloud, and SaaS environments.
- Review areas such as identity and access management, authentication, authorization, network security, firewalls, cloud configurations, vulnerability management, and data protection.
- Perform technical and architectural security reviews for new and existing technology initiatives.
- Recommend practical short- and long-term approaches for mitigating identified security risks.
- Partner with application development, infrastructure, architecture, cybersecurity, and project teams to develop remediation strategies.
- Document security findings, control gaps, risks, and recommended mitigation strategies.
- Evaluate compensating controls when identified risks cannot be immediately remediated.
- Help ensure security requirements are incorporated throughout the software development lifecycle (SDLC).
- Review application-security and DevSecOps controls, including SAST, DAST, and Software Composition Analysis (SCA).
- Apply established cybersecurity frameworks and standards when conducting assessments.
- Provide security guidance and act as a trusted technical advisor to cross-functional stakeholders.
- Research unfamiliar technologies and independently determine applicable security requirements and risks.
Required Qualifications
- Strong professional experience in information security, cybersecurity, or IT risk management.
- Demonstrated experience conducting technical security assessments and cyber risk assessments.
- Broad understanding of security across cloud, infrastructure, networking, and application environments.
- Strong knowledge of security controls related to:
- Identity and access management
- Multifactor authentication
- Authentication and authorization
- Network and firewall security
- Vulnerability management
- Cloud security
- Application security
- Data protection
- Experience identifying security control gaps and translating technical findings into actionable remediation recommendations.
- Working knowledge of NIST Cybersecurity Framework (CSF) and/or NIST SP 800-53.
- Experience working with application development, infrastructure, architecture, and project teams.
- Ability to independently research technical environments, gather information from stakeholders, and make informed security recommendations.
- Strong written and verbal communication skills.
Top Skills
- Security Assessments / Cyber Risk Assessments
- Cloud Security, particularly Microsoft Azure
- NIST CSF / NIST SP 800-53
- Infrastructure, Network, and Application Security
- Security Controls and Risk Analysis
- Security Architecture Reviews
- Risk Mitigation and Remediation Planning
- Cross-functional Technical Consulting
Tools & Technology Experience
Experience with or a strong understanding of:
- Microsoft Azure and Azure security controls
- AWS and/or Google Cloud Platform
- Identity and access management / IAM
- Multifactor authentication and authorization controls
- Network security and firewalls
- Vulnerability management technologies
- Cloud security controls and configurations
- SAST, DAST, and SCA technologies
- DevSecOps practices
- Secure Software Development Lifecycle (SDLC)
- Security architecture and design principles
- NIST CSF and NIST SP 800-53
Preferred Qualifications
- 7+ years of experience in information security, cybersecurity consulting, security architecture, or a related field.
- Strong experience securing or assessing Microsoft Azure environments.
- Experience developing or evaluating security/reference architectures.
- Experience working within complex or regulated enterprise environments.
- Familiarity with ISO 27001 or similar security standards.
- Experience across multiple cloud platforms, including Azure, AWS, and/or Google Cloud Platform.
- CISSP, cloud security, GIAC/SANS, or comparable security certifications are beneficial but not required.
Beacon Hill is an equal opportunity employer and individuals with disabilities and/or protected veterans are encouraged to apply.
California residents: Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.
If you would like to complete our voluntary self-identification form, please or copy and paste the following link into an open window in your browser: ;/p>
Completion of this form is voluntary and will not affect your opportunity for employment, or the terms or conditions of your employment. This form will be used for reporting purposes only and will be kept separate from all other records.
Company Profile:
Beacon Hill Technologies, a premier National Information Technology Staffing Group, provides world class technology talent across all industries utilizing a complete suite of staffing services. Beacon Hill Technologies' dedicated team of recruiting and staffing experts consistently delivers quality IT professionals to solve our customers' technical and business needs.
Beacon Hill Technologies covers a broad spectrum of IT positions, including Project Management and Business Analysis, Programming/Development, Database, Infrastructure, Quality Assurance, Production/Support and ERP roles.
Learn more about Beacon Hill and our specialty divisions, Beacon Hill Associates, Beacon Hill Financial, Beacon Hill HR, Beacon Hill Legal, Beacon Hill Life Sciences and Beacon Hill Technologies by visiting .
Benefits Information:
Beacon Hill offers a robust benefit package including, but not limited to, medical, dental, vision, and federal and state leave programs as required by applicable agency regulations to those that meet eligibility. Upon successfully being hired, details will be provided related to our benefit offerings.
We look forward to working with you.
Beacon Hill. Employing the Future
