Cybersecurity Consultant

About the role

Sopra Steria, a listed European technology group, is forming a team of six people (including one team lead) in Singapore to support a large government project covering security risk assessment, security policies, application security, vulnerability assessment, system security acceptance testing and cloud security. The selected consultant works collaboratively within the team, so no single person needs all six skill sets.

Key responsibilities

• Support security risk assessments across on-premise, cloud, DevOps, IoT and third-party environments
• Assist in vulnerability assessments, analyze findings and document remediation recommendations
• Review security policies, standards and procedures against industry and regulatory requirements
• Take part in application security activities such as secure code reviews, threat modelling and CI/CD pipeline assessments
• Support cloud security assessments, including configuration reviews, access controls and data protection on public and hybrid clouds
• Help with System Security Acceptance Testing (SSAT) and document security gaps
• Document findings, prepare risk reports and maintain the security risk register
• Deliver ad-hoc tasks needed to meet the client's scope

Required profile

• Bachelor's degree in computer science, information technology, cybersecurity or a related field preferred
• At least 3-5 years of experience in cybersecurity consulting, focused on risk assessment, application security and cloud security
• Hands-on cloud security experience (AWS, Azure, GCP)
• Experience with STRIDE and PASTA threat modelling
• Familiarity with NIST and ISO 27001
• Project management, analytical and communication skills, and proven client relationship skills

What we offer

• Hybrid working and 18 days of annual leave
• Comprehensive health and insurance coverage
• Annual performance bonus
• Training, certification opportunities and career development
• Team-building activities and social events