Product Security Consultant

CENSUS

Product Security Consultant evaluating security postures and validating security in cybersecurity products from design to deployment. Collaborating with teams to improve security risk assessments.

Posted 6/4/2026full-timeRemote • 🇬🇷 GreeceMid-LevelSeniorWebsite

Tech Stack

Tools & technologies

CloudCyber SecurityDockerKubernetesMicroservicesVault

About the role

Key responsibilities & impact

Review and validate security documentation (e.g., Security Targets, threat models, trust boundaries, asset inventories).
Assess the completeness, accuracy, and risk coverage of various threat models and risk assessment frameworks (STRIDE, LINDDUN, OWASP, TARA, TAL, etc.).
Verify security requirement traceability across assets, trust boundaries, and system functions.
Conduct architectural and implementation-level reviews of security controls (e.g., encryption, access control, key management).
Perform targeted security testing (white-box and black-box) on system APIs, client/mobile apps, backend services, and cloud infrastructure.
Validate implementation of cryptographic controls, key lifecycle procedures, and secure communication protocols.
Evaluate the use of post-quantum cryptography and hybrid models in secure key management.
Analyze secure deployment configurations across containerized platforms (Docker, Kubernetes), CI/CD pipelines, and cloud services.
Deliver comprehensive, standards-aligned technical reports based on evaluation findings.
Communicate product security risks clearly to both technical and non-technical audiences.

Requirements

What you’ll need

MSc or BSc in Computer Science, Electrical/Software Engineering, Cybersecurity, or a related technical discipline.
3+ years of experience in product security, software evaluation, or penetration testing.
Proven ability to evaluate threat models, security requirements, and mitigation effectiveness.
Strong technical writing and documentation skills in English.
Excellent analytical skills and attention to detail.
In-depth understanding of security architecture and common system design patterns (e.g., API gateways, microservices, message queues, service meshes).
Hands-on experience performing design-level security reviews and verifying implementation alignment with defined threat models.
Familiarity with structured security frameworks such as Common Criteria, FIPS 140, ISO 15408, OWASP ASVS, and MASVS.
Practical experience with security testing in diverse product environments (mobile, embedded, web/cloud, API).
Knowledge of authentication, authorization, identity, and secrets management technologies (e.g., OAuth2, MFA, PKI, SSO, Cloud IAM, HashiCorp Vault).
Proficiency in applied cryptography (e.g., mTLS, E2EE, AEAD, key derivation, key wrapping, remote attestation).
Ability to identify security vulnerabilities across platforms (e.g., OWASP Top 10, misconfigurations, transport security gaps).

Benefits

Comp & perks

Professional development opportunities
Flexible work arrangements

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

security documentation reviewthreat models assessmentrisk assessment frameworkssecurity controls reviewsecurity testingcryptographic controls validationpost-quantum cryptographysecure deployment configurationstechnical writingapplied cryptography

Soft Skills

analytical skillsattention to detailcommunication skills