Technical Security Consultant

You'll work hands-on in our clients' environments across security architecture, identity and access, data protection and detection and response, increasingly on the AI systems they're now deploying across their estates. You'll be in front of clients explaining your own work rather than handing it to someone else, and your career gets more technical as it gets more senior, not less. We hire across all levels, with responsibility that scales to what you bring, and what you build becomes part of how EQUA works. EQUA is a Copenhagen-based consultancy in cybersecurity, compliance, and security operations. We help leaders navigate complexity and build resilience that lasts, advising everyone from deep-tech firms to large enterprises on NIS2 compliance, security architecture, detection & response, and AI enablement. We're small and senior by design. No layers, no slide factory, no waiting your turn. You get direct access to the partners, real ownership from day one, and client work from the start. The role As a Technical Security Consultant, you'll run your own workstreams across client engagements, working in the estate rather than alongside it. This is a full-time role for someone who wants to stay technical as they get more senior. The reason we're hiring now is AI. Our clients have spent years deciding who may reach which data, and are now deploying systems that read across the whole estate on someone's behalf. The questions are the oldest ones in our field, what is this data, who can reach it, under whose identity, and how do we know what happened, asked about systems nobody has secured before. The work is a mix of:

• Client delivery: security architecture and hardening, identity and access design, data protection and DLP, and technical assessments where you read the configuration rather than the questionnaire, across Entra ID, Purview, Defender and Sentinel, and AWS or Google Cloud where clients sit there.
• Securing AI adoption: bringing one technical control model across the AI platforms a client is running, permissions and scoped credentials for agents, DLP that fires when a model is pointed at a decade-old file share, and a gateway enforcing identity, tool allow-lists, logging and spend limits in one place.
• Detection & response: getting the telemetry into the SIEM and building what sits on top of it, detections for prompt injection, sensitive-data egress, anomalous connector use and mass export, with playbooks behind them.
• A bit of everything: we're a lean team, so there's always something useful to get involved in, from proposals to the tooling we use ourselves.

The exact balance depends on your strengths and interests. We'd rather build the role around a strong candidate than force a strong candidate into a fixed one. Who we're looking for

• Real depth in information or cyber security: security architecture, identity and access, data protection, detection and response, or platform and application security.
• Comfortable in a tenant, a log, a permission chain and a config file, not only in the diagram of one.
• Able to read and write enough code to understand what a system is doing and automate what shouldn't be done by hand, Python or similar, plus infrastructure-as-code and CI/CD.
• Curious about how AI systems are actually built, and sceptical about how they're sold. You don't need an AI background; the security depth is the part we can't teach you.
• Strong written and spoken communication in Danish and English, and able to explain a finding to the architect who fixes it and the director who funds it.
• Bonus: OT or critical infrastructure experience, detection engineering at scale, Microsoft E5 depth, or hands-on work with LLM APIs, agents and MCP.

What we offer

• Genuine ownership of client engagements and a direct line to the partners.
• Competitive compensation.
• Senior colleagues with backgrounds in enterprise security architecture, SOC leadership and critical infrastructure, and the room to deepen your own expertise alongside them.
• Time each month for research and building, budget for the certification or conference you want, and a lab to break things in.
• A career that gets more technical as it gets more senior, not less.
• Flexible, hybrid working.

Practical details

• Employment type: Full-time
• Location: Copenhagen (hybrid possible)
• Start date: By agreement

We review applications on a rolling basis, so don't wait for a deadline.