Cyber Security Consultant

Company Description Careful Security is a full-service cybersecurity and compliance implementation firm powered by Dashr.ai, a patent-pending security intelligence platform. The company focuses on delivering complete security programs, getting clients audit-ready in about 90 days with fixed pricing and guaranteed timelines. Careful Security handles policy development, penetration testing, SIEM setup, control implementation, evidence collection, and audit coordination across frameworks such as SOC 2, ISO 27001, ISO 42001, HIPAA, and PCI DSS. The Dashr.ai platform provides real-time KPIs, multi-framework compliance mapping, AI-driven remediation plans, anomaly detection, and executive reporting from a single dashboard. With a strong track record of successful audits, cost savings, and ROI, Careful Security works primarily with mid-market B2B SaaS, FinTech, Healthcare, and Manufacturing organizations.

Role Description The Cyber Security Consultant role is a remote contract position responsible for supporting client engagements across compliance, security assessments, and ongoing security operations. Day-to-day activities include performing penetration tests and vulnerability assessments, conducting gap analyses against standards such as SOC 2, ISO 27001, HIPAA, and PCI DSS, and recommending practical remediation steps. The consultant will help design and implement security controls, contribute to SIEM configuration and monitoring strategies, and assist with evidence collection and documentation using Dashr.ai. This role involves collaborating with client stakeholders, translating technical findings into clear business language, and preparing concise reports and presentations for audits and executive reviews. The consultant is expected to work independently, manage multiple projects, and maintain consistent communication with internal teams and clients.

Qualifications

• Broad cybersecurity expertise, including experience designing and implementing security programs and controls.
• Application Security skills, such as secure software development practices, code review, and web/mobile application testing.
• Network Security skills, including firewall configuration, intrusion detection/prevention, and secure network architecture design.
• Information Security skills covering governance, risk management, policies, procedures, and compliance with common frameworks.
• Vulnerability Assessment experience, including scanning, analysis, prioritization, and remediation planning.
• Familiarity with SOC 2, ISO 27001, HIPAA, PCI DSS, or similar standards, and prior audit or certification support experience.
• Strong analytical, problem-solving, and written communication skills, with the ability to create clear technical and executive-level reports.
• Ability to work effectively in a remote, client-facing consulting environment, managing multiple engagements and deadlines.
• Relevant certifications (e.g., CISSP, CISM, OSCP, CEH, GIAC) and a degree in Computer Science, Information Security, or