The Cybersecurity Consultant is responsible for design, implementation, integration, and support of enterprise security solutions involving encryption, cryptographic key management, databases, and network infrastructure.
The ideal candidate should have strong hands-on experience with cryptographic technologies and the ability to troubleshoot complex integrations across applications, databases, HSMs, and networks.
- The role leads the end-to-end implementation lifecycle of security solutions for enterprise customers
- Responsibilities include gathering requirements, defining project scope, and developing implementation plans aligned with security and compliance goals
- The consultant designs secure key management, encryption, and access control architectures using HSM and CM, and performs hands-on installation, configuration, integration, testing, and validation
- The role also includes providing training, best practice guidance, documentation, and knowledge transfer to customer teams, as well as presenting solutions and project updates to both technical and executive stakeholders
- 5+ years of experience in cybersecurity, infrastructure security, cryptography, key management or related technologies.
- Relevant security certifications such as CISSP, CCSP, Security+, vendor-specific HSM/KMS certifications, etc
- Experience in customer-facing consulting, implementation or technical support.
- Ability to travel up to 50%
- Willing to go through EU Security Clearance
- Fluency in English to work effectively in an international team
Encryption & Cryptography:
- Strong understanding of encryption concepts and cryptographic fundamentals.
- Hands-on knowledge of symmetric and asymmetric encryption.
- Understanding digital signatures, certificates and PKI.
- Understanding of encryption at rest and encryption in transit.
- Knowledge of TLS/SSL and certificate lifecycle management.
Key Management:
- Strong understanding of cryptographic key lifecycle management.
- Key generation, rotation, storage, backup/recovery, archival and destruction.
- Experience with Key Management Systems (KMS).
- Understanding of key hierarchies, key wrapping and separation of duties.
- Knowledge of KMIP is highly desirable.
Networking:
- Good understanding of TCP/IP, DNS, routing, firewalls and load balancers.
- Experience troubleshooting connectivity between applications, databases, KMS and HSM infrastructure.
- Understanding of TLS, ports, certificates and network-level troubleshooting.
- Ability to use tools such as ping, telnet, nc, curl, openssl, tcpdump or Wireshark.
Operating Systems / Troubleshooting:
- Strong troubleshooting experience across Linux, networking, databases and security infrastructure.
- Good Linux/Unix administration skills.
- Basic Windows Server administration.
- Strong troubleshooting and log-analysis capabilities.
- Ability to analyze issues across application → network → database → KMS → HSM layers.
- Experience with AWS KMS, Azure Key Vault, OCI or Google Cloud KMS.
Advantage:
- Experience with Thales Luna HSM / Luna Network HSM.
- Experience with Thales CipherTrust Manager / Data Security Platform.
- Knowledge of PKCS#11, JCE, OpenSSL, CNG/CAPI.
- Experience with KMIP implementations.
- Experience with Oracle TDE / SQL Server TDE.
- Knowledge of cloud and hybrid-cloud encryption architectures.
- Experience with PKI, Certificate Authorities and certificate lifecycle automation.
- Experience working with enterprise customers and supporting production environments.
- Provide technical guidance on cryptographic key lifecycle and security best practices.
- Yearly bonus
- 5 weeks of vacation
- 3 Personal days per callendar year
- Hybrid working model
- Meal vouchers in the amount of 211 CZK/day (55% covered by company)
- Unlimited access to learning platform Udemy
- Professional trainings and further education
- Multisport program and card
- Contribution to Private pension plan or Capital life insurance: 3% on the top of basic monthly salary rate
- Metlife: Injury insurance covering permanent consequences of injury up to 24 monthly salaries for permanent injury consequences and Life insurance covering death by any reason, 24 monthly salaries to beneficiary
- Contribution to the cafeteria programme with Benefit Plus card in the amount of 10,000 points (1 point = 1CZK)
- Healthcare service through membership in Santé clinics
- Phone – Unlimited Mobile Data, calls and SMS within the Czech Republic
- Laptop
- Business trips abroad allowances + pocket money of 20% of allowance
- 100% Maternity leave cover of base salary during the first 15 weeks
- Customer Card at MAKRO Cash & Carry ČR s.r.o
- Language course 1x/week of personal choice
