Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowFirst seen 3 days ago

Cybersecurity Expert

Riseup Labs190 open roles

Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowCybersecurity ExpertRiseup Labs

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Riseup Labs's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.1% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.1%7 days
  4. 19.1%14 days
  5. 35.6%30 days
  6. 52.7%60 days
This job: first seen 3 days ago

The posting

Job Context:

We are looking for a hands-on Cybersecurity Expert to take full ownership of information security at Riseup Labs. You will assess our infrastructure, close gaps, put practical controls in place, train our people, lead incident response, and support compliance with SOC 2, PCI DSS, and other frameworks. You will also act as a trusted security voice in client conversations and help grow our cybersecurity offerings.

This is an execution role. We need someone who implements and tests controls, not someone who only writes policies.

Job Responsibilities:

  • Security Assessment and Risk ManagementReview infrastructure, networks, cloud environments, applications, devices, access controls, and internal practices to identify vulnerabilities and risks. Conduct regular security audits, vulnerability assessments, risk assessments, and security reviews, and track findings through to remediation. Maintain a risk register with clear priorities, owners, and timelines.
  • Security Governance and ControlsEstablish and continuously improve company-wide security policies, standards, and controls. Work with Technology, IT, DevOps, Compliance, HR, and Delivery teams so that controls are implemented and operating, not just documented. Implement and manage security controls such as identity and access management, MFA, endpoint protection, logging and monitoring, patching, backup, and encryption.
  • Incident ResponseDesign and maintain an incident response plan, escalation matrix, and playbooks. Lead investigation, containment, recovery, and post-incident reviews for security incidents. Run incident-response tabletop exercises and drills.
  • Security Awareness and TrainingDeliver regular security awareness training and workshops for all employees. Plan and run phishing and social-engineering simulations and report on results and improvement.
  • Compliance and AssuranceSupport SOC 2, PCI DSS, and other security and compliance requirements, including evidence collection, control testing, and audit readiness. Map controls to relevant frameworks (e.g., ISO 27001, NIST CSF, CIS Controls) and drive continuous improvement of our security posture.
  • Secure Development and DevSecOpsPartner with engineering and project teams on secure SDLC and security-by-design practices. Support secure code review, threat modeling, SAST/DAST, dependency and container scanning, and secrets management in CI/CD pipelines. Advise on securing cloud and AI platforms, APIs, and data pipelines.
  • Pre-Sales and Business GrowthJoin client and pre-sales meetings to understand security requirements and respond to security questionnaires and RFPs. Contribute to solution design and proposals with a security component. Help define, package, and grow Cybersecurity as a service offering (e.g., assessments, VAPT, compliance readiness, security consulting).

Required Qualifications

  • Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent practical experience).
  • 3+ years of hands-on experience in cybersecurity, information security, or security engineering.
  • Proven experience with vulnerability assessment and penetration testing, risk assessment, and security audits.
  • Strong knowledge of network security, application security, cloud security (AWS, Azure, or GCP), and identity and access management.
  • Practical experience with security tools such as SIEM, EDR, vulnerability scanners (e.g., Nessus, Qualys, OpenVAS), Burp Suite, and Wireshark.
  • Hands-on experience with incident response and digital forensics fundamentals.
  • Working knowledge of SOC 2, PCI DSS, ISO 27001, and NIST frameworks, with experience supporting at least one audit or certification.
  • Familiarity with secure SDLC, DevSecOps, and OWASP Top 10.
  • Excellent written and verbal communication, with the ability to explain security topics to technical and non-technical audiences, including clients and leadership.

Preferred Qualifications

  • Professional certifications such as CISSP, CISM, CISA, CEH, OSCP, CompTIA Security+, or cloud security certifications (e.g., AWS Security Specialty, AZ-500).
  • Experience with ISO 27001 implementation or PCI DSS assessment.
  • Experience in a software, IT services, or consulting environment.
  • Experience securing AI/ML platforms, APIs, and data pipelines.
  • Prior pre-sales, client-facing, or security consulting experience.
  • Experience with enterprise or government sector security requirements in Bangladesh.
  • Scripting skills (Python, Bash, or PowerShell) for security automation.

Key Competencies

  • Ownership and accountability.
  • Hands-on, execution-focused approach.
  • Risk-based thinking and sound judgment.
  • Cross-functional collaboration.
  • Teaching and communication skills.
  • Client confidence and professionalism.
  • Ability to work calmly under pressure during incidents.

Workplace:

  • Uttara, Dhaka

Working hour:

  • 9.00 AM to 6.00 PM

Salary:

  • Negotiable (Based on experience and skills)

Compensation and Benifits: (Applicable for Bangladeshi Employee Only)

  • Annual Performance Evaluation and Increment
  • Festival Bonus-02 (As Per Company Policy)
  • Group Life and Health Insurance
  • Full Subsidized Lunch/Dinner
  • Annual Retreats
  • Celebration of Events & Occasions
  • Training & Development by Organization Assigned Consultants
  • Weekly 2 holidays
  • Paid Time Off 24 days (CL & SL)
  • Maternity Leave with benefits (As per the company’s policy)
  • Paternity Leave (As per the company’s policy)
  • Bereavement Leave (As per the company’s policy)
  • Public Holidays as per Riseup Labs calendar

The Application Process:

  • Telephone Round.
  • Interview with the Management, Technology Team and Talent Acquisition Team.
  • Job Offer.

N.B.: Only shortlisted candidates will be communicated in the recruitment process.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Riseup Labs's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Riseup Labs's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Riseup Labs's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.