Cybersecurity Consultant

The role

You will help strengthen information security for an international client across engineering, IT, and compliance. The work covers CI/CD pipeline security, API and endpoint inventory, access control design, and vulnerability management.

What you will do

• Harden CI/CD pipelines with least-privilege access, isolated build environments and pipeline configuration as code
• Integrate and tune security gates for SAST, SCA, dependency scanning, secret detection, container images and infrastructure-as-code
• Implement secure secrets management, credential rotation and segregation of CI/CD credentials
• Strengthen software supply-chain security through artifact signing, SBOM generation, dependency pinning and trusted registries
• Enforce source-control and release controls, including branch protection, mandatory reviews and protected release workflows
• Build and maintain an authoritative inventory of APIs, endpoints and supporting infrastructure
• Map assets against security controls such as authentication, authorization, encryption, logging, monitoring and rate limiting
• Design and document an access matrix for users, service accounts, API clients, integrations and automated jobs
• Strengthen identity and access management, including enforcing SSO wherever technically feasible
• Onboard assets into Qualys, validate scan coverage and coordinate vulnerability triage and remediation

Required qualifications

• Proven experience in information security, IT security or product security in complex technical environments
• Hands-on experience with security asset management and building asset inventories
• Practical experience with SAST and DAST and integrating security testing into delivery workflows
• Working knowledge of API security, including the OWASP API Security Top 10, authentication and authorization models and encryption standards
• Experience designing and documenting access control models, including RBAC and access matrices
• Understanding of IAM principles, SSO, least-privilege access and service-account security
• Experience with vulnerability management, including asset onboarding, scan coverage, risk-based prioritization and remediation tracking
• Familiarity with frameworks such as ISO 27001, NIS2 or SOC 2
• Strong technical documentation skills
• Strong communication skills with technical and business stakeholders
• Hands-on, delivery-oriented mindset with autonomy to drive tasks forward
• Professional fluency in English

Nice to have

• Familiarity with cloud environments, particularly AWS
• Experience with GitHub and securing source-control and CI/CD workflows
• Experience with vulnerability management platforms such as Qualys
• Familiarity with identity providers and SSO platforms such as Okta or Microsoft Entra ID
• Experience with software supply-chain security, including SBOMs, artifact signing and dependency security
• Experience working across multiple product and engineering teams in an international organization

Before you apply

• Work from the European Union region and a work permit are required
• Recruitment process: CV review, HR call, interview, client interview, decision

About the company

Xebia is a global AI-first digital transformation and engineering partner with about 5,000 professionals across 16 countries. The CEE region has nearly 1,000 experts delivering applications, data platforms and AI solutions.