Remote Cybersecurity Consultant

Scopic is hiring a Remote Cybersecurity Consultant. This is a remote job – you can work from home in Sri Lanka for a company abroad.

Job summary

• Post: Remote Cybersecurity Consultant
• Employer: Scopic
• Where: Remote – open to Worldwide (includes Sri Lanka)
• Job type: Part-time
• Level: Senior
• Apply by: 11 January 2027 (or until the post is filled)

About this kind of job

Security jobs involve protecting people and property, checking visitors and reporting incidents, often in day and night shifts.

What the job involves

• Assessment and governance
• Write our core security policies and procedures: access control, acceptable use, secure development, incident response, vendor and AI tool usage
• Set up and maintain the security backlog, risk register and progress metrics, and report progress to management monthly
• Company security ("secure the house")
• Configure and enforce SSO and MFA across email, Git hosting, cloud consoles, CI/CD and Passbolt
• Review and fix access rights, and set up onboarding and offboarding checklists
• Harden our Passbolt setup and implement a secrets manager for applications and pipelines, including migrating existing secrets out of code and CI variables
• Implement baseline hardening for laptops, cloud accounts, backups and logging

Working remotely from Sri Lanka

• You need a laptop, a stable internet connection and good written English.
• Check the working hours (time zone) and how you will be paid (for example bank transfer, Payoneer or Wise) before you accept an offer.
• Foreign income received through banks in Sri Lanka may have tax rules – keep your payment records.

Tip from JobPortal

Keep your police report and any security training certificates ready. Apply only through the official link and never pay money to get a job.

Source

This listing comes from Himalayas. Read the full original advert and apply there.

• Must have
• 8+ years of experience in information security, with recent hands-on work in application security, DevSecOps or cloud security
• Comfortable doing the work yourself: configuring security tools, writing pipeline configuration, reviewing code, testing applications and writing policies
• Practical experience setting up a secure development lifecycle and integrating security tools into CI/CD pipelines
• Good knowledge of cloud security in at least one major cloud (AWS, Azure or GCP)
• Ability to explain security risks in plain language to both engineers and management
• Fluent English, written and spoken
• Kubernetes and container security experience