Principal Cybersecurity Consultant (m/w/d)

For a modern and growth-oriented cybersecurity company, we are looking for a Principal Cybersecurity Consultant (m/f/d) in Düsseldorf for direct placement.

In this key role, you will lead complex Secure-by-Design transformations for enterprise clients and take ownership from strategy and security architecture through to implementation and outcomes. You will combine deep cybersecurity expertise with strategic consulting and work closely with CISOs, CTOs, product leadership, experienced engineers and security architects.

• You lead complex Secure-by-Design transformation programs for enterprise clients and take ownership of the strategy, client relationship and outcome
• You develop security target architectures, transformation strategies and rollout roadmaps and guide their implementation across multiple teams and project phases
• You design and lead cloud security programs, including control frameworks, risk assessments and security architectures for AWS, Azure or GCP environments
• You integrate security requirements into cloud landing zones and modern software engineering environments
• You develop Secure SDLC programs covering CI/CD security, threat modelling, security champions and relevant security KPIs and KRIs
• You develop security approaches for LLMs, agentic systems and MLSecOps and translate regulatory requirements into concrete technical measures
• You advise CISOs, CTOs and product leadership while working closely with security architects and engineers
• You help develop methods, accelerators and the Secure-by-Design practice and support the professional development of other consultants
• You contribute to a platform designed to make Secure-by-Design approaches scalable across different client engagements

• A responsible Principal-level position with end-to-end ownership of complex cybersecurity transformations
• Direct collaboration with company leadership without a traditional consulting pyramid
• Enterprise projects across sectors including telecommunications, banking, insurance, automotive and critical infrastructure
• Hybrid working model in Düsseldorf with two remote days per week as a baseline
• Additional remote periods depending on client schedules, as well as workations within the EU
• Typically 3–5 days of travel per month to client sites within the DACH region
• Occasional international travel for workshops and conferences
• English as the internal working language – German is not a mandatory requirement
• The opportunity to actively shape methods, accelerators and scalable Secure-by-Design solutions