Security Delivery Consultant

Job description

Key Responsibilities

• Develop, implement, and continuously improve cybersecurity operations processes, procedures, policies, incident response plans, security monitoring workflows, and operational runbooks.
• Collaborate with SIEM engineers and security teams to develop, optimize, and refine correlation rules for enhanced threat detection accuracy and reduced false positives.
• Monitor, investigate, and analyze security events, providing technical guidance during ongoing investigations and security incidents.
• Lead incident detection, triage, investigation, containment, eradication, and recovery activities.
• Administer and manage Endpoint Detection and Response (EDR) platforms across Windows, macOS, and Linux environments, including deployment, upgrades, health monitoring, policy management, and integrations.
• Administer and manage Network Detection and Response (NDR) technologies, including policy creation, correlation rule development, platform tuning, and ongoing optimization.
• Manage vendor support engagements related to cybersecurity tools and coordinate issue resolution activities.
• Utilize incident response tools and technologies throughout the detection, investigation, and response lifecycle.
• Produce cyber threat intelligence reports and security assessments for technical teams, business stakeholders, and leadership.
• Lead day-to-day cybersecurity operations activities and provide guidance, coaching, and mentorship to security analysts.
• Support on-call and major incident response activities when required.
• Track security incidents, trends, and operational metrics to identify improvement opportunities.
• Collaborate with engineering, infrastructure, risk, and compliance teams to strengthen overall security posture.
• Drive continuous improvement initiatives to enhance cybersecurity operations maturity and effectiveness.
• Required Technical Expertise
• Strong knowledge of Security Operations Center (SOC) processes and cybersecurity operations.
• Hands-on experience with SIEM platforms and security monitoring tools.
• Strong experience with Endpoint Detection and Response (EDR) solutions.
• Experience with Network Detection and Response (NDR) technologies and network security monitoring.
• Knowledge of incident response methodologies and cyber threat investigation techniques.
• Familiarity with threat intelligence processes and threat hunting methodologies.
• Strong understanding of security event analysis, attack techniques, and detection engineering concepts.
• Experience creating and tuning detection rules and alerting mechanisms.
• Knowledge of security frameworks and industry best practices.
• Skills and Qualifications
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• 5-10 years of experience in cybersecurity operations or a related field.

Qualifications

• Hands-on experience with SIEM platforms and security monitoring tools.
• Experience with Network Detection and Response (NDR) technologies and network security monitoring.
• Familiarity with threat intelligence processes and threat hunting methodologies.