Cyber Security Consultant

Role & Responsibilities:

· Implement cybersecurity remediation activities across defined workstreams and sprint plans.

· Configure and maintain identity and access controls including MFA, SSO, role-based access, least privilege, privileged accounts, service accounts, and periodic access reviews.

· Support implementation of privileged access controls using tools such as Windows LAPS, PIM, managed identities, key vaults, or equivalent native security capabilities.

· Execute vulnerability management activities including vulnerability scanning, findings validation, remediation tracking, and risk-based prioritization.

· Implement and support patch management processes, including patch testing, deployment coordination, SLA tracking, and exception handling.

· Configure centralized logging and monitoring integrations into SIEM platforms such as Microsoft Sentinel or equivalent tools.

· Ensure critical infrastructure, applications, network devices, firewalls, SaaS platforms, and security tools generate usable logs for SOC monitoring.

· Support SOC alert triage, incident investigation, escalation, evidence collection, and incident response playbook execution.

· Maintain and update incident response plans, technical runbooks, communication workflows, and tabletop exercise evidence.

· Implement backup and recovery controls, including immutable backups, scheduled backup validation, restoration testing, and recovery evidence documentation.

· Build and maintain technical asset inventories, data inventories, network architecture diagrams, and mappings to critical business processes.

· Support network security improvements including firewall rule review,

network access controls, network segmentation, IDS/IPS logging, and secure remote access.

· Implement data protection controls such as encryption, data labeling, retention enforcement, DLP policies, and secure data handling controls.

· Support secure development controls including secure code repositories, SDLC documentation, coding/testing standards, peer review processes, and separation of duties between development and deployment.

· Coordinate with MSPs and internal IT teams for hands-on execution of patching, backup, monitoring, and endpoint security activities.

· Produce control evidence, implementation documentation, dashboards, and remediation status updates for governance and audit purposes.

· Support OT/ICS security implementation, including passive monitoring setup, asset-boundary validation, OT evidence packs, and coordination with O&M/GOP providers where applicable.

· Build and run passive OT monitoring pilots using tools such as Zeek, Suricata, Malcolm, or similar platforms where required.

· Track assigned activities through sprint plans, maintain implementation notes, and report progress against defined success measures.

Candidate Profile:

· Bachelor’s degree in Computer Science, IT, Cybersecurity, Engineering, or a related field.

· 4–8 years of hands-on experience in cybersecurity engineering, IT infrastructure security, security operations, or security control implementation.

· Practical experience implementing identity and access controls, including MFA, SSO, RBAC, least privilege, privileged access, service accounts, and access reviews.

· Hands-on exposure to Microsoft security tools such as Entra ID/Azure AD, Intune, Defender, Sentinel, PIM, Key Vault, LAPS, or equivalent platforms.

· Experience configuring SIEM/logging integrations, validating log ingestion, supporting SOC monitoring, and assisting with alert triage or incident investigation.

· Good understanding of vulnerability scanning, patch management, remediation tracking, exception handling, and evidence collection.

· Experience supporting backup validation, restoration testing, disaster recovery documentation, and incident response playbook execution.

· Familiarity with network security concepts such as firewall logs, IDS/IPS, network segmentation, secure remote access, and endpoint protection.

· Ability to translate cybersecurity control requirements into implementation steps, technical runbooks, evidence packs, and closure documentation.

· Exposure to OT/ICS, SCADA, passive monitoring tools such as Zeek, Suricata, Malcolm, or regulated environments would be preferred.