Application & Security Architecture Consultant

Role Summary

We are looking for a Cybersecurity Application & Security Architecture Consultant to review, evaluate, and strengthen the organization's entire cybersecurity toolset and architecture. The consultant will assess all existing security applications and controls, identify gaps and inefficiencies, and deliver clear, prioritized recommendations for improvements and changes that reduce risk and strengthen the organization's overall security posture.

Key Responsibilities

• Conduct comprehensive audits of the organization's existing cybersecurity applications, tools, and platforms (SIEM, EDR/XDR, IAM, firewalls, DLP, vulnerability scanners, etc.) to assess coverage, redundancy, and gaps.
• Evaluate the effectiveness, performance, and ROI of current security tools and recommend consolidation, replacement, or upgrade where appropriate.
• Design and maintain the enterprise security architecture roadmap, aligning tools and controls with business objectives and risk appetite.
• Identify gaps in the current security posture and propose prioritized, actionable remediation plans with clear timelines and ownership.
• Define and enforce security architecture standards, frameworks, and reference architectures (e.g., NCA, NIST CSF, ISO 27001, CIS Controls, Zero Trust) across the organization.
• Review and validate the configuration and deployment of security applications to ensure they are optimally tuned and not just installed.
• Perform vendor and tool evaluations for new cybersecurity technologies, including proof-of-concept testing and cost-benefit analysis.
• Collaborate with IT, DevOps, and application teams to embed security architecture principles into new projects, cloud migrations, and SDLC processes.
• Assess integration and interoperability between security tools to eliminate blind spots and reduce alert fatigue from disconnected systems.
• Recommend and help implement automation and orchestration (SOAR) opportunities to improve detection and response efficiency.
• Review risk assessments and threat modeling for critical applications, infrastructure, and third-party integrations.
• Review network, endpoint, cloud, and application security controls, and recommend architecture changes to reduce attack surface.
• Support incident response and forensic investigations by evaluating whether existing tools provided adequate visibility and recommend improvements.
• Develop and present findings, risk ratings, and improvement roadmaps to leadership and key stakeholders in clear, business-relevant language.
• Ensure compliance of tools and architecture with applicable regulatory and industry requirements (e.g., GDPR, HIPAA, PCI-DSS, SOC 2).
• Maintain up-to-date documentation of the security tool inventory, architecture diagrams, data flows, and control mappings.
• Stay current on emerging threats, attack techniques, and security technologies, and proactively advise on adopting relevant innovations.
• Mentor internal security staff and support knowledge transfer to strengthen long-term in-house security capability.

Required skills and qualifications

• Bachelor’s degree in computer science, Information Security, or a related field (or equivalent practical experience).
• 3-7 years of experience in cybersecurity, security architecture, or security consulting roles.
• Hands-on experience evaluating and deploying security tools such as SIEM, EDR/XDR, IAM/PAM, firewalls, DLP, CASB, and vulnerability management platforms.
• Strong understanding of security frameworks and standards (NCA, NIST, ISO 27001, CIS Controls, Zero Trust, MITRE ATT&CK).
• Working knowledge of cloud security (AWS/Azure/GCP) and hybrid environments.
• Relevant certifications preferred: CISSP, CISM, CCSP, SABSA, or vendor-specific security certifications.
• Excellent analytical, documentation, and stakeholder communication skills.
• Prior consulting or advisory experience is a strong plus.

What we're looking for

A pragmatic, detail-oriented security professional who can move fluidly between hands-on tool evaluation and strategic architecture recommendations, and who communicates findings clearly to both technical teams and leadership.