We are seeking an experienced Cyber Security Consultant to support the design, implementation, and continuous improvement of security capabilities across enterprise environments. The successful candidate will work across multiple security domains, helping organizations strengthen their cyber resilience, protect critical assets, and align security practices with business objectives and regulatory requirements.
This role offers exposure to cutting-edge technologies, cloud platforms, AI security initiatives, operational technology environments, and modern cyber defense strategies.
Key Responsibilities
Design, implement, and optimize cybersecurity solutions across enterprise environments.
Assess security risks and recommend appropriate controls and remediation strategies.
Support clients and internal stakeholders in building secure architectures and operational security capabilities.
Develop and maintain security standards, policies, procedures, and technical documentation.
Conduct security assessments, threat modeling, vulnerability analysis, and architecture reviews.
Collaborate with infrastructure, development, cloud, AI, and business teams to embed security throughout the technology lifecycle.
Participate in incident response, investigations, threat hunting, and security improvement initiatives.
Stay current with emerging threats, technologies, and regulatory requirements.
Areas of Expertise
The ideal candidate should demonstrate strong experience in one or more of the following domains:
Endpoint, EDR/XDR & SOAR Security
Deployment and engineering of EDR/XDR solutions such as CrowdStrike, Microsoft Defender, SentinelOne, Cortex, and similar platforms.
SOAR automation, playbook development, and security workflow orchestration.
Detection engineering, telemetry correlation, and incident automation.
Scripting using Python, PowerShell, or equivalent technologies.
Cloud & Zero Trust Security
Security architecture across AWS, Azure, and GCP.
Zero Trust strategy implementation and network segmentation.
Identity and Access Management (IAM), federation, and conditional access.
Container, Kubernetes, and CI/CD security.
Application Security & DevSecOps
Secure SDLC implementation.
SAST, DAST, and Software Composition Analysis tooling.
Secure code reviews and threat modeling.
API, container, and microservices security.
Threat Detection & Incident Response
Threat hunting and detection engineering.
SIEM content development and optimization.
Digital forensics, malware analysis, and incident response.
Threat intelligence collection and analysis.
Governance, Risk & Compliance (GRC)
ISO 27001, NIST CSF, SOC 2, PCI DSS, DORA, and related frameworks.
Risk assessments and control evaluations.
Audit preparation and compliance management.
Third-party risk management.
Data Security & Privacy
Data classification and DLP solutions.
Encryption, PKI, key management, and cryptographic controls.
Privacy engineering and regulatory compliance.
Secure data architectures and AI data protection.
AI & Machine Learning Security
Secure AI/ML architecture design.
AI risk assessment and governance.
Protection against model poisoning, prompt injection, and data leakage.
Security controls throughout the AI lifecycle.
Required Qualifications
Bachelor's degree in Computer Science, Cyber Security, Information Technology, or related field.
5+ years of experience in Cyber Security, Information Security, or related disciplines.
Strong understanding of security architecture, risk management, and cyber defense operations.
Experience with cloud platforms, security tools, and enterprise security frameworks.
Excellent analytical, communication, and stakeholder management skills.
Ability to work independently and within cross-functional teams.
Preferred Certifications:
CISSP
CISM
CCSP
GIAC Certifications
CEH
AWS Security Specialty
Microsoft Security Certifications
ISO 27001 Lead Imple
