🔐 Cybersecurity Sales Representative – Commission-Based Job Type: Contract | Commission-Only Location: US-Based Freelancers Only About Us We are a boutique cybersecurity consulting firm delivering enterprise-grade managed security services, vCISO consulting, penetration testing, compliance advisory (SOC 2, ISO 27001, FedRAMP, HIPAA, NIST CSF), and 24/7 SOC operations. Led by a 25-year cybersecurity veteran and CCISO, we serve clients across finance, healthcare, government, and technology sectors in the US and internationally. The Opportunity We are looking for a driven, self-motivated Cybersecurity Sales Representative to help us grow our client base. This is a pure commission-based role — your earning potential is directly tied to your results. If you have an existing network in IT, security, or enterprise decision-maker circles, this is a high-value opportunity. What You'll Do Identify and generate qualified leads (SMBs, mid-market, and enterprise) Prospect and outreach to potential clients via LinkedIn, email, calls, and your personal network Present and position our service portfolio to prospects Schedule discovery calls with our technical leadership team Manage your pipeline and report progress weekly Help craft and send tailored proposals to potential clients Services You'll Be Selling Managed Cybersecurity & SOC (24/7) Virtual CISO (vCISO) Services Penetration Testing (Web, Mobile, Infrastructure) Compliance Consulting (SOC 2, ISO 27001, FedRAMP, HIPAA, NIST CSF) Threat Detection & Response (XDR) Cloud & Endpoint Security Third-Party Risk Management (TPRM) Cybersecurity Project Management What We're Looking For Proven B2B sales experience (cybersecurity, IT services, or SaaS preferred) Existing network of IT/security decision-makers (CISOs, CTOs, IT Directors) is a major plus Strong communication and proposal writing skills Self-starter who thrives without micromanagement Familiarity with cybersecurity concepts (you don't need to be technical, but you must speak the language) US-based only Compensation 💰 Commission-only — competitive percentage on closed deals Deal sizes typically range from $5,000 to $100,000+ Recurring revenue opportunities on managed services contracts Commission structure discussed during interview How to Apply Please submit a proposal that includes: Your relevant sales experience (B2B, tech/cybersecurity preferred) A brief description of your current network or lead generation approach Notable deals or clients you've closed Why you're a great fit for a commission-only role We do not respond to generic proposals. Tailored submissions only.

Overview We are a leading AI marketing platform serving B2B technology companies. We combine cutting-edge AI tools with a talented human creative team to produce high-quality marketing content at scale. We're looking for an experienced Content Manager to own client relationships and oversee content production for a cybersecurity client, with potential to expand to additional accounts. The Role You'll serve as the day-to-day account lead for an active B2B technology client, managing content production from brief to delivery. You'll work directly with the client on Zoom calls, receive and interpret their requests, and oversee a team of writers, designers, and video editors to deliver outstanding work. You'll also work inside our proprietary AI marketing platform to draft, review, and manage content workflows. This is not a "prompt and post" role. We believe AI gets you 80% of the way there — your job is that critical final 20%: judgment, quality, brand alignment, and client communication. Responsibilities -Serve as primary client contact; join regular Zoom calls with client stakeholders -Receive client briefs and translate them into clear creative direction for our production team -Use our Media Shower platform to manage orders, review deliverables, and track feedback -Draft and edit content using AI tools, then refine against client brand guidelines and voice -Oversee output across formats: blog posts, white papers, social campaigns, email nurture streams, landing pages, and video -Maintain quality control across all deliverables — nothing goes to the client without your sign-off -Proactively flag issues, manage timelines, and keep production moving Requirements -3+ years managing content or accounts at a B2B tech company, agency, or marketing platform -Outstanding writing and editing skills (you can tell the difference between good content and AI slop) -Experience using AI writing tools (Claude, ChatGPT, or similar) and refining output against brand guidelines -Comfortable on client-facing Zoom calls: professional, articulate, confident -Strong project management skills; able to juggle multiple deliverables and deadlines -Familiarity with B2B marketing concepts: buyer personas, funnel stages, SEO, demand gen -Cybersecurity or enterprise tech experience a strong plus Logistics -Contract role via Upwork; all payment processed through Upwork -Remote; must be available during US business hours (ET preferred) -Estimated hours: 10 hrs/week To Apply Please include a brief note on your B2B tech experience, a sample of content you've edited or produced, and your hourly rate.

We are a fast-growing technology advisory firm that helps mid-sized companies evaluate and select the best IT vendors for projects like: • Cloud infrastructure • Backup & disaster recovery • Cybersecurity • Network / SD-WAN • VoIP / UCaaS • Data center / colocation We do not deliver the services ourselves. We act as the client’s technical advisor and procurement concierge, helping them understand their requirements and selecting the best vendors. We are looking for a Solutions Architect / Technical Consultant who can lead technical discovery with clients. Your role will be to run requirements calls, diagnose technical needs, and translate those requirements into clear vendor specifications. This is not a support role and not an MSP job. This is a pre-sales technical advisor role. Responsibilities • Run technical discovery calls with clients • Identify infrastructure gaps and project needs • Translate requirements into vendor specifications • Recommend vendor categories and architectures • Assist in vendor evaluation and technical comparisons • Document findings and scope clearly You may have worked as: • Solutions Architect • Senior Systems Engineer • Pre-Sales Engineer • Cloud Architect • Network Architect • Technical Consultant Experience with several of the following is important: • Cloud platforms (AWS / Azure) • Networking / SD-WAN • Cybersecurity tools • Backup / disaster recovery • VoIP / UCaaS • Infrastructure architecture You must be able to: • Ask great technical questions • Quickly understand complex environments • Communicate clearly with non-technical executives • Strong spoken English is required. • You should be comfortable speaking with CIOs and IT Directors. Engagement • Part-time to start • 5–10 hours per week • Discovery calls scheduled in advance This role will likely grow into a long-term partnership. To apply Please send a Loom video answering the following: 1. A short description of your technical background 2. Your experience in client-facing technical roles 3. A brief example of a technical discovery call you have led

We are a US-based company looking for an experienced compliance and certification consultant/team to help us achieve the following certifications: • ISO 27001
• SOC 2 Type II Scope of Work: * Conduct gap assessment and readiness review * Assist with security policies and documentation * Guide implementation of required controls and processes * Support audit preparation and evidence collection * Coordinate with auditors and ensure successful certification completion * Recommend compliance best practices for a growing organization Requirements: * Proven experience delivering ISO 27001 and SOC 2 Type II certifications * Strong understanding of cybersecurity, risk management, and compliance frameworks * Prior experience with US-based companies preferred * Ability to provide timelines, implementation approach, and estimated costs Please include: * Your previous certification projects * Estimated timeline for completion * Tools/frameworks you use * Any relevant certifications or credentials We are looking for a reliable long-term compliance partner who can guide us from assessment through certification.

Mostro Cybersecurity helps mortgage brokers, RIAs, and financial advisors achieve elite security compliance. We're looking for a part-time Compliance & GRC Specialist (15–20 hrs/week) to own our client compliance programs. MUST HAVES: US or Canada-based 3+ years in compliance, GRC, or security operations Experience with at least 2 of: FTC Safeguards Rule, SOC 2, NIST CSF Hands-on experience with GRC platforms (ControlMap, Vanta, Drata, or similar) Experience running and interpreting penetration tests Strong English (policy reading/writing is core to this role) WHAT YOU'LL DO: Manage compliance workflows for 3–4 client accounts inside ControlMap Run Threatmate pen tests and create client remediation roadmaps Build FTC Safeguards, SOC 2, and NIST CSF compliance programs Conduct gap assessments, evidence collection, and policy reviews Prepare clients for audits and regulatory scrutiny RATE: $40–$60/hour depending on experience TO APPLY: Tell us about your experience with FTC, SOC 2, or NIST and your experience with GRC platforms. Include your rate and availability.

Location: Massachusetts (Hybrid/Remote with Onsite Support as Needed) Employment Type: Full-Time Clearance/Background Requirements: Ability to pass state and federal background investigations About the Opportunity We are seeking a highly skilled and experienced Senior Splunk Engineer to support large-scale security operations, observability, and data analytics initiatives for government and enterprise environments, including critical support for the Commonwealth of Massachusetts Executive Office of Technology Services and Security (EOTSS). This role requires a hands-on technical expert capable of architecting, deploying, optimizing, troubleshooting, and maintaining complex Splunk environments supporting cybersecurity operations, compliance initiatives, incident response activities, and enterprise IT monitoring. The ideal candidate combines deep Splunk expertise with strong infrastructure, cloud, security, and automation skills and can operate effectively within highly regulated environments. Key Responsibilities Splunk Architecture & Administration • Design, deploy, configure, and maintain enterprise Splunk environments. • Manage Splunk Enterprise and Splunk Cloud deployments. • Administer Indexers, Search Heads, Deployment Servers, Heavy Forwarders, Universal Forwarders, and Cluster Managers. • Design and optimize data ingestion pipelines across diverse data sources. • Implement and maintain Splunk clustering and high-availability architectures. • Perform capacity planning and infrastructure optimization. Security Operations Support • Support Security Operations Center (SOC) initiatives. • Develop and maintain SIEM use cases, correlation searches, alerts, and dashboards. • Create and tune Splunk Enterprise Security (ES) content. • Assist with threat hunting and incident investigations. • Support MITRE ATT&CK mapping and threat detection engineering. • Analyze security events and provide actionable recommendations. EOTSS & Government Support • Assist with onboarding state agencies and municipalities into centralized Splunk platforms. • Support compliance initiatives including CJIS, IRS Publication 1075, HIPAA, NIST, and other regulatory frameworks. • Participate in major incident response activities. • Collaborate with agency stakeholders, security teams, and executive leadership. • Develop operational runbooks and technical documentation. Data Engineering & Integration • Integrate logs and telemetry from: o Microsoft 365 o Azure o AWS o Google Cloud o Windows Server o Linux o Network Infrastructure o Firewalls o Endpoint Security Platforms o Identity Providers o SaaS Applications • Develop custom parsers, field extractions, transforms, and CIM mappings. • Support Splunk Data Models and accelerated searches. Automation & Optimization • Develop automation using: o Python o PowerShell o REST APIs o SOAR platforms • Improve operational efficiency through workflow automation. • Optimize search performance and reduce infrastructure costs. • Implement monitoring and health-check frameworks. Required Qualifications Technical Experience • 5+ years of hands-on Splunk engineering experience. • 3+ years supporting enterprise-scale Splunk deployments exceeding 500GB/day ingestion. • Strong experience with: o Splunk Enterprise o Splunk Enterprise Security (ES) o Splunk Cloud o Splunk ITSI (preferred) o Splunk SOAR (preferred) Infrastructure Knowledge • Windows Server Administration • Linux Administration • Active Directory • Microsoft Azure • AWS • Virtualization Platforms • Networking fundamentals • DNS, DHCP, PKI, VPN technologies Security Knowledge • SIEM Operations • Threat Detection Engineering • Incident Response • Vulnerability Management • Security Frameworks: o NIST o CIS o CJIS o HIPAA o IRS 1075 o CMMC (preferred) Scripting & Development • Python • PowerShell • Regex • JSON • XML • REST APIs • Git Preferred Certifications Splunk Certifications • Splunk Certified Architect • Splunk Certified Admin • Splunk Enterprise Security Certified Admin Security Certifications • CISSP • GIAC Certifications • GCIH • GCIA • Security+ • CySA+ Cloud Certifications • Microsoft Azure Administrator • Azure Security Engineer • AWS Solutions Architect Desired Experience Candidates with experience supporting any of the following will receive special consideration: • State Government • EOTSS • Massachusetts Municipalities • Public Safety Agencies • Law Enforcement • Emergency Management • Healthcare • Critical Infrastructure • Managed Security Service Providers (MSSP) • Security Operations Centers (SOC) Personal Characteristics • Strong troubleshooting skills • Excellent communication abilities • Ability to interact with executive leadership • Strong documentation practices • Self-starter capable of working independently • Team-oriented mindset • Ability to remain calm during high-pressure incidents • Passion for cybersecurity and operational excellence What Success Looks Like Within the first 12 months, this individual will: • Improve Splunk search performance and platform stability. • Assist in onboarding additional agencies and data sources. • Enhance threat detection coverage. • Reduce alert fatigue through optimization. • Strengthen compliance reporting capabilities. • Become a trusted technical advisor for EOTSS stakeholders and leadership. Bonus Qualifications • Previous EOTSS experience. • Existing Commonwealth of Massachusetts relationships. • Experience supporting large Splunk deployments exceeding 1TB/day ingest. • Experience with cybersecurity consulting or MSSP environments. For EOTSS specifically, I would strongly recommend targeting candidates with Splunk Architect, Splunk ES, Microsoft Sentinel, and Massachusetts state government experience, because the technical challenges tend to be as much about stakeholder management, compliance, and onboarding agencies as they are about Splunk administration itself. A former EOTSS contractor or someone from Optiv, Deloitte, Accenture, TekStream, or a large MSSP would likely hit the ground running.

We're a small architectural firm in New York City preparing for our upcoming cyber insurance renewal and need help navigating the insurer's security questionnaire. The forms have become increasingly detailed and ask about topics such as multi-factor authentication, backups, endpoint protection, encryption, incident response, and user access controls. We want to make sure we're answering accurately and understand where our current practices may fall short of insurer expectations. We're looking for an experienced cybersecurity professional who can: • Review our cyber insurance application and supporting questions • Explain what the insurer is really asking for in plain English • Meet with firm leadership via video to discuss our current environment • Identify any answers that may be incomplete, inaccurate, or potentially problematic • Recommend practical improvements that would strengthen our security posture and reduce future insurance concerns The ideal consultant will: • Have experience working with small professional services firms • Understand common cyber insurance requirements and security controls • Be comfortable discussing technical and business issues with non-technical leadership At the conclusion of the project, we'd like: • A completed review of the insurance questionnaire • A summary of any concerns or gaps identified • A prioritized list of recommended improvements • A discussion of which recommendations are most important before our next renewal cycle This is a short advisory engagement. We are looking for practical guidance, not a penetration test or formal compliance audit. Budget: $750–$1,250 fixed price, depending on experience and approach.

Senior, United States based Security and Compliance Lead to own the security architecture and compliance posture of an enterprise ArcGIS digital twin platform for a critical infrastructure client (a major United States public port authority, named under NDA). Built natively on ArcGIS Enterprise; government grade security required. You will own: ISO 27001 and 27002 ISMS documentation; NIST digital identity controls (assurance levels IAL2, AAL2, FAL2); Zero Trust architecture; Azure AD (Entra) single sign on, MFA, role based access, and identity provisioning; strong encryption at rest and in transit; incident response runbooks and a controls compliance matrix; monthly access audits; CONUS only data residency. Required: Active CISSP; ISO 27001 Lead Implementer; NIST digital identity practitioner experience; commercial cloud security (Azure preferred); enterprise or government security leadership; United States based (mandatory, no offshore); To apply: List your CISSP, ISO 27001 Lead Implementer, and NIST digital identity credentials with dates; describe one ISMS or identity controls implementation you led, including cloud platform and client scale; confirm you are United States based

# MSP Growth Lead (Pax8 Experience Preferred) Remote | Part-Time | Contract IRONCLOUD Government Services LLC is an early-stage technology startup focused on cybersecurity, compliance, cloud services, managed IT services, and software licensing solutions. We are building a compliance-focused Managed Service Provider (MSP) platform supporting healthcare organizations, government contractors, municipalities, and commercial businesses. We are seeking a motivated and entrepreneurial MSP Growth Lead to help support vendor partnerships, managed services growth, software licensing initiatives, and operational development. This is a startup environment with flexible hours and long-term growth potential. ## Responsibilities * Assist with Pax8 onboarding and vendor partnerships * Support Microsoft Partner and AWS Partner initiatives * Help structure managed services and software licensing offerings * Build relationships with strategic partners and vendors * Support recurring revenue and operational growth initiatives * Assist with onboarding workflows and process development * Identify business growth opportunities across commercial and government sectors * Support proposal and partnership development efforts ## Preferred Experience * Pax8 experience preferred * MSP or Managed Services experience * Microsoft 365 familiarity * Vendor/channel partnership experience * Cybersecurity or compliance familiarity * Startup or entrepreneurial mindset * Strong communication and organizational skills * Ability to work independently ## About the Company IRONCLOUD Government Services LLC focuses on: * Managed IT Services * Microsoft 365 & Cloud Solutions * Cybersecurity & Compliance * Compliance-as-a-Service * Software & Cloud Licensing * AWS Cloud Infrastructure Company certifications and positioning include: * SDVOSB * MBE * Maryland SBR * Federal contracting experience * AWS Activate startup credits ## Compensation * Part-time contract opportunity * Flexible scheduling * Hourly or project-based compensation * Performance incentives may be available * Potential long-term leadership growth opportunities This opportunity is ideal for someone interested in helping support and grow an early-stage technology startup focused on long-term scalability and operational growth.

The Information Security Analyst partners with business units, IT, DevOps, and third-party vendors to maintain and continuously strengthen the organization's security posture and regulatory compliance. This role demands deep technical expertise across cloud environments, operational security, risk management, and data privacy — paired with the maturity to lead initiatives, influence stakeholders, and drive measurable improvements to the Information Security Management System (ISMS). Key Responsibilities Security Operations & Monitoring - Monitor and analyze security alerts from SIEM and other detection tools; tune rules and enhance detection capabilities to reduce false positives and improve threat visibility. - Lead vulnerability assessments across network, infrastructure, OS, and applications; track findings through to validated remediation. - Ensure timely patching and system hardening across all infrastructure layers, including endpoints, servers, and cloud workloads. - Participate in and continuously improve incident response, business continuity, and disaster recovery exercises. - Stay current on emerging threats, vulnerabilities, and attack techniques; translate intelligence into actionable defensive recommendations. Application & Cloud Security - Advise DevOps and Engineering teams on secure architecture, secure-by-design principles, and common application vulnerabilities (OWASP Top 10, etc.). - Conduct application security assessments, code reviews, and penetration test coordination; drive remediation with development teams. - Collaborate with IT to ensure secure design and deployment of systems, networks, and cloud environments. - Support system administrators with security policy deployment and configuration aligned to company standards and industry benchmarks (e.g., CIS). Compliance & Risk Management - Lead and support technical compliance activities for applicable frameworks (GDPR, HIPAA, PII, SOC 2, CIS); identify control gaps, implement remediation, and gather audit evidence. - Perform internal access control reviews and spot audits to verify policy adherence and data protection standards. - Assess third-party and external vendors for alignment with the ISMS; maintain vendor risk documentation and escalate material findings. - Assist in designing, maintaining, and continuously improving the ISMS to reflect the evolving risk landscape. - Prepare executive-ready reports documenting security metrics, threat activity, and audit outcomes for leadership and senior IT staff. Security Awareness & Training - Develop and deliver effective security awareness training and educational materials covering general cybersecurity hygiene, PHI handling, and HIPAA compliance. - Champion a security-first culture by engaging employees at all levels with relevant, practical guidance. Required Qualifications & Skills - Bachelor's degree in Computer Science, Information Security, or a closely related field. - 5+ years of progressive experience in an information security role, including hands-on implementation of security controls. - Strong technical foundation in IT systems, network security, cloud security (AWS, Azure, or GCP), and infrastructure hardening. - Hands-on experience with endpoint protection platforms, SIEM solutions, and log analysis. - Solid understanding of identity and access management (IAM), encryption, and authentication frameworks. - Familiarity with secure coding practices and common application-layer vulnerabilities. - Experience conducting vendor risk assessments and managing third-party security relationships. - Proficiency with compliance frameworks: GDPR, US data privacy laws, HIPAA, SOC 2, and CIS Controls. - Relevant certifications such as CISSP, CISM, CEH, SANS GIAC, or equivalent. - Excellent analytical, problem-solving, and written/verbal communication skills. - Proven ability to work independently across remote or distributed teams. - Sound judgment, high integrity, and a self-motivated approach to continuous learning.