Senior Cybersecurity Consultant ($125,000 + equity)

Who You Are

• The Seasoned Consultant: You have 3–5 years of experience in cybersecurity consulting or professional services. You’ve "been in the room" with clients, understand how to manage expectations, and are obsessed with project success.
• Technical First: You possess a strong technical foundation in product security, application security, embedded/IoT systems, cloud architecture, or secure development. You can reason through how systems actually work, where keys live, and what an attacker could realistically do.
• An Elite Communicator: You can comfortably review complex technical evidence and articulate findings to both deep-dive engineering teams and non-technical executive stakeholders. You are comfortable providing difficult feedback to clients when you identify design or implementation issues that could result in unacceptable cybersecurity risk to a device or to patients
• Autonomous & Solution-Oriented: You don’t wait for a task list. You see the project's objective, anticipate client hurdles, and clear them before they impact delivery timelines.

Core Requirements

• 3–5+ years of hands-on cybersecurity experience designing, defending, testing, or auditing real systems (products, applications, networks, cloud environments, or embedded/connected devices).
• Technical Cybersecurity Foundation, in one or more relevant areas such as:as product security, application security, embedded/IoT security, cloud security, network security, penetration testing, vulnerability management, secure software development, or security architecture
• Ability to review cybersecurity documentation and technical evidence, including architectures, data flows, interfaces, threat models, risk assessments, vulnerability reports, security testing evidence, SBOM materials, and control descriptions. 
• Proven track record in a client-facing consulting role where performance was measured by project ownership, client satisfaction, and successful end-to-end delivery.
• Working knowledge of common security controls and failure modes, including authentication, authorization, encryption, TLS, key/certificate management, secure boot, code signing, software updates, logging, access control, hardening, vulnerability handling, and insecure data storage.
• Ability to identify and explain cybersecurity gaps, including missing attack surfaces, incomplete threat coverage, unsupported security claims, weak control rationales, unclear trust boundaries, incomplete remediation evidence, and risks affecting confidentiality, integrity, availability, safety, or effectiveness.
• Exceptional writing and presentation skills, the ability to write a technical security report that is as clear, comprehensive, and polished as it is secure.
• Strong working knowledge of common controls and failure modes (e.g., authentication, encryption, key management, secure boot, software update integrity, and insecure data storage).
• Multi-project fluency: Ability to manage multiple client workstreams simultaneously without dropping the ball.
• Tech-Forward: Comfortable leveraging AI, LLM tooling, and security intelligence platforms to accelerate daily delivery workflows.

Benefits:

• Health insurance
• Flexible work schedule
• Progressive parental and paid family leave
• Unlimited vacation policy
• Remote First
• Market salaries
• 401k match
• High degree of autonomy

Don’t meet every single requirement? Studies have shown that women and people of color are less likely to apply to jobs unless they meet every single qualification in the job posting. At Medcrypt we are committed to creating a diverse and inclusive environment so we strongly encourage you to apply even if you don't believe you meet every single qualification outlined.

A meeting lands on your calendar

If they’re a yes, I book the chat. You show up — that’s the whole job-hunt.