# Cybersecurity Consultant at Jobgether > Remote · Mexico · Unspecified · Security · open. Source: https://alderhq.app/jobs/lever%3Ajobgether%3A808028d4-e0af-4ccf-bb3c-1e3dbf50c79b (read 2026-11-11). ## Facts (observed) - Company: [Jobgether](https://alderhq.app/companies/jobgether) - Location text: Mexico - Where it can be done from (inferred): Remote · Mexico (evidence: "Location: Mexico") - Posted: 2026-11-11 (0 days ago) - First seen by alder: 2026-11-11 · last verified: 2026-11-11 - Reposted: 0 times · edited: 0 times - Apply on the employer's site: https://jobs.lever.co/jobgether/808028d4-e0af-4ccf-bb3c-1e3dbf50c79b - Skills listed (inferred): Docker ## Pay and sponsorship - Posted pay: not posted ## Description (the employer's text) ### Accountabilities: In this role, you will take direct ownership of security improvements, combining technical implementation, governance, compliance, and team enablement. Your main responsibilities will include: Security assessment and governance: Conduct security maturity assessments using frameworks such as OWASP SAMM, reviewing repositories, development pipelines, and cloud environments. Translate assessment findings into prioritized security roadmaps. Develop and maintain security policies and procedures covering access control, acceptable use, secure development, incident response, vendor management, and AI tool usage. Maintain security backlogs, risk registers, and performance metrics, providing monthly progress reports to management. Organizational security and infrastructure: Configure and enforce Single Sign-On (SSO) and Multi-Factor Authentication (MFA) across email, Git hosting, cloud platforms, CI/CD systems, and Passbolt. Review and improve access permissions while establishing onboarding and offboarding procedures. Strengthen Passbolt security and implement secrets management solutions for applications and pipelines, migrating existing secrets from source code and CI variables. Implement baseline security measures for employee devices, cloud accounts, backups, and logging systems. Develop incident response procedures and organize tabletop exercises with the team. Secure software development: Design and implement a standardized Secure Software Development Lifecycle (Secure SDLC) based on OWASP ASVS and OWASP SAMM. Roll out secure development practices across active client projects. Configure and optimize the SecOps platform, reduce false positives, establish pipeline quality gates, and coordinate vulnerability triage. Integrate security scanning tools into CI/CD pipelines, including SAST, SCA, secrets scanning, Infrastructure as Code (IaC), container scanning, DAST, and SBOM generation. Lead threat modeling sessions and document findings for active projects. Conduct security code reviews of high-risk changes and support developers in resolving vulnerabilities. Perform internal application security testing before releases and coordinate external penetration testing activities. Regulatory compliance and certification: Assess the impact of the EU Cyber Resilience Act (CRA), NIS2, and relevant local regulations on internal operations and client projects. Establish vulnerability handling and disclosure processes, including support for client CRA reporting obligations. Lead hands-on ISO/IEC 27001 preparation activities, including defining scope, conducting risk assessments, preparing the Statement of Applicability, developing policies, and collecting compliance evidence. Coordinate with the relevant certification body throughout the preparation process. Client security services: Help define security service packages and tiers for inclusion in client proposals. Complete client security questionnaires and develop reusable responses. Participate in selected client meetings and discussions, providing senior-level cybersecurity expertise. Team development and knowledge sharing: Work closely with the internal Security Lead, transferring knowledge and supporting their gradual ownership of daily security operations. Organize internal workshops covering topics such as OWASP Top 10, threat modeling, and secure CI/CD practices. Recommend relevant training programs and certification pathways for developers, Security Champions, and DevOps engineers. ### Requirements The ideal candidate brings extensive cybersecurity experience and a strong technical background in application security, DevSecOps, and cloud security. This position requires someone who can independently implement security solutions while communicating effectively with both technical teams and management. The following qualifications are expected: At least 8 years of professional experience in information security, including recent hands-on experience in application security, DevSecOps, or cloud security. Proven ability to independently configure security tools, write pipeline configurations, review source code, test applications, and develop security policies. ### How Jobgether works We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1 --- Data: alder (https://alderhq.app). Cite https://alderhq.app/jobs/lever%3Ajobgether%3A808028d4-e0af-4ccf-bb3c-1e3dbf50c79b and the date you read it. Observed facts come from the employer's own listing; location reach, level, family and skills are inferences.