Security Consultant

About the Role
The Security Consultant is a seasoned level role focused on translating clients' cybersecurity requirements and implementing customized security solutions into specific systems, applications, and product designs. This position entails identifying and developing security solutions for clients using company products, outsourced technology solutions, and technical tools. The consultant will engage with clients regarding secure product configurations, deployment, and security patches to minimize vulnerabilities, while also providing comprehensive scanning, penetration testing, vulnerability assessments, monitoring services, and source code analysis, delivering detailed results to clients. Additionally, the role supports clients in the development and implementation of product security controls.

Key Responsibilities

• Work on strategic projects to ensure efficient and effective reactions to security breaches and mitigate immediate and potential threats.
• Utilize mitigation, preparedness, response, and recovery approaches to minimize business disruptions and commercial consequences.
• Provide detailed technical support for investigation and analysis response activities and evaluate the effectiveness of existing practices.
• Conduct regular threat and vulnerability assessments and determine deviations from acceptable configurations or policies.
• Participate in assessing risk levels and support the development of appropriate mitigation countermeasures in both operational and non-operational situations.
• Analyze evidence to support network vulnerability mitigation.
• Assist peers in managing and implementing the information security management system.
• Participate in the development and implementation of policies, processes, and guidelines to standardize security management across the organization.
• Apply tactics, techniques, and procedures using a full range of tools related to administrative, criminal, and counterintelligence gathering (e.g., in-depth case analyses, continuous monitoring, malware analysis, and clear documentation).
• Proactively search through critical infrastructure, systems, and networks to detect and isolate advanced threats that may harm the organization.
• Utilize both manual approaches and automated tools to identify, analyze, and report events, supporting the development of countermeasures to protect against future threats.

Qualifications
To thrive in this role, you need to have:

• Strong understanding of information technology and information security.
• Solid understanding of security risks and preventative controls.
• Excellent understanding of security operational processes and controls.
• Service consulting aptitude, focusing on business, service, and sales aspects.
• Excellent verbal and written communication skills.
• Impeccable attention to detail with the ability to translate internal customer requirements into solutions.
• Up-to-date knowledge of security threats, countermeasures, security tools, and network technologies.
• High level of drive and the ability to work under pressure.
• Ability to build and maintain cross-functional relationships with a variety of stakeholders.
• Understanding of relevant laws, regulations, and compliance frameworks affecting the technology sector.
• Good ability to assess and manage cybersecurity risks at both organizational and project levels.
• Knowledge of security frameworks and standards such as NIST, ISO/IEC 27001, CIS, etc.

Academic Qualifications and Certifications

• Bachelor's degree or equivalent in Information Technology, Computer Science, Engineering, or a related field.
• Industry-relevant certifications such as CISSP, CISM, CEH, GSEC, or CompTIA Security+ are essential.

Required Experience

• Demonstrable experience in the Information Technology Security Industry or relevant experience in a similar role within a related environment.
• Experience with security architecture design principles.
• Experience with industry compliance and standards such as ISO 27000, PCI DSS, NIST, HIPAA, or others.
• Experience with security tools and techniques to cover SANS Top 25, OWASP, or others.
• Experience working in a multi-team environment across multiple geographies.

Workplace Type
On-site Working

Equal Opportunity Employer
The company is proud to be an Equal Opportunity Employer with a global culture that embraces diversity and is committed to providing an environment free of unfair discrimination and harassment.