Security Consultant

Role overview

Responsibilities

• Develop security solutions for clients using company products, outsourced technology solutions, and technical tools.
• Conduct scanning, penetration testing, vulnerability assessments, monitoring, and source code analysis; deliver detailed results to clients.
• Support strategic security-breach response and apply mitigation, preparedness, response, and recovery approaches.
• Investigate technical security issues, evaluate practices, and recommend improvements.
• Assess threats, vulnerabilities, configuration or policy deviations, and risks; support countermeasure development.
• Analyze evidence to support network vulnerability mitigation.
• Support information security management system implementation and standardize security policies, processes, and guidelines.
• Apply investigative and monitoring techniques, including case analysis, continuous monitoring, malware analysis, and clear documentation.
• Search critical infrastructure, systems, and networks for advanced threats; use manual and automated tools to analyze and report events and support countermeasures.

Qualifications and experience

• Strong understanding of information technology, information security, security risks, preventative controls, and security operational processes.
• Demonstrated security-industry or relevant-role experience, including seasoned experience with security architecture design.
• Seasoned experience with compliance standards such as ISO 27000, PCI DSS, NIST, or HIPAA, and security techniques covering SANS Top 25, OWASP, or comparable approaches.
• Seasoned experience working across multiple teams and geographies.
• Bachelor's degree or equivalent in information technology, computer science, engineering, or a related field.
• An industry-relevant certification such as CISSP, CISM, CEH, GSEC, or CompTIA Security+ is essential.
• Knowledge of relevant technology laws, regulations, compliance frameworks, and security frameworks such as NIST, ISO/IEC 27001, and CIS.
• Ability to assess and manage cybersecurity risk at organizational and project levels.
• Consulting aptitude, strong verbal and written communication, attention to detail, and ability to translate customer requirements into solutions.
• Ability to maintain stakeholder relationships, keep current on threats and tools, and work under pressure.

Workplace

• The role is on-site.