Architect / Principal Consultant – Cybersecurity Control Implementation

About Quantum Beyond

Quantum Beyond advises companies and organizations on their strategic decisions related to technology, artificial intelligence, cybersecurity, digital sovereignty, and organizational transformation. Our experts work independently alongside leadership teams and strengthen internal teams as well as their partners.

Your mission

You will turn architectures, security requirements, and risk treatment plans into technical controls that can be applied and verified. You will work with internal IT teams, security leaders, developers, service providers, and integrators to ensure consistent and effective implementation.

You will act as a senior technical expert to guide, configure, validate, and remediate security measures. You will also build the skills of the teams responsible for operating them day to day.

Key responsibilities

• Translate risks and requirements into technical controls.
• Design detailed implementation plans.
• Prioritize controls according to the organization’s risks and capabilities.
• Configure or oversee the configuration of security solutions.
• Support the hardening of systems, applications, and cloud services.
• Implement or improve IAM, MFA, and privileged access mechanisms.
• Support the segmentation of networks and environments.
• Strengthen the protection of data, endpoints, workloads, and APIs.
• Put logging and monitoring mechanisms in place.
• Automate controls where that approach is appropriate.
• Integrate security into development and deployment pipelines.
• Coordinate work carried out by suppliers and integrators.
• Test the effectiveness and reliability of controls.
• Correct gaps and implementation issues.
• Produce documentation and supporting evidence.
• Train internal teams and transfer the knowledge they need.

Profile sought

• Minimum of 8 years of experience in technical cybersecurity, architecture, or security engineering.
• Hands-on experience implementing cybersecurity controls.
• Solid knowledge of cloud, hybrid, and on-premises environments.
• Command of IAM, segmentation, encryption, logging, and data protection concepts.
• Understanding of operating systems, networks, applications, and APIs.
• Ability to collaborate with architects, developers, administrators, and GRC leaders.
• Ability to work hands-on in complex environments.
• Structured, pragmatic, and results-oriented approach.
• Excellent documentation and knowledge transfer skills.
• Professional French and English.

Assets

• CISSP, CCSP, GIAC, or an equivalent technical certification.
• AWS, Azure, Google Cloud, or specialized vendor certifications.
• Experience in DevSecOps and security automation.
• Knowledge of NIST, CIS Controls, and ISO 27001.
• Experience in industrial environments or critical infrastructure.
• Knowledge of Zero Trust architectures.
• Experience with SIEM, SOAR, EDR, XDR, PAM, or CSPM technologies.

Conditions

Location (on site and remote), compensation based on experience, benefits and working arrangements: to be discussed or determined...