Senior Security Consultant

Our Client's Job Description:

As a Senior Security Consultant, you will provide professional security services and expert guidance to clients, fostering a secure and compliant environment. In addition to advising on overall host, application, and network security, you will play a pivotal role in mentoring and training less experienced staff. Your expertise will be instrumental in executing the following responsibilities:

• Utilize your deep understanding of our client's service portfolio.
• Lead and oversee up to three concurrent security assessments from start to finish, including client and management communication, adherence to relevant methodologies, report generation and editing, and client debriefings.
• Mentor and support the development of team members.
• Offer valuable insights and guidance on hacking tools and advanced malware detection techniques.
• Develop and implement IT security incident response strategies, ensuring timely communication with relevant stakeholders.
• Stay current with the latest developments in secure coding and cyber-security practices.
• Assist the business in meeting compliance requirements.
• Identify vulnerabilities in systems and propose effective remediation strategies.
• Provide expert advice on software and hardware defense strategies.
• Lead and oversee social engineering campaigns.
• Maintain a high level of awareness regarding the latest news and threats in the security industry.
• Regularly provide status updates to your manager.
• Apply the appropriate RL Methodologies to your work.
• Ensure project tickets are updated for all actions taken on assigned projects.

Skills & Knowledge Requirements:

Successful candidates should possess advanced skills and knowledge in one or more of the following areas:

• Proficiency in network administration to assess internal systems, including firewalls and IPS/IDS devices, to ensure network safety.
• Familiarity with standards related to implementing a risk management framework, such as COBIT, ITIL, ISO 27001/2, and NIST.
• Competence in common programming languages, such as C, C++, C#, Java, SQL, or PHP.
• Experience with Windows, UNIX, and Linux operating systems.
• Expertise in encryption technologies, ethical hacking, and penetration testing.
• Understanding of compliance requirements related to key legislations such as HIPAA, SOX, PCI, NIST, GLBA, and compliance assessments.
• Proficiency in managing the Internet protocol suite.
• Ability to work effectively both as part of a team and independently, taking initiative as needed.
• Flexibility to adapt to dynamic tasks.
• Strong analytical skills for problem-solving and breaking down complex issues into manageable parts.
• Effective communication skills, including the ability to translate technical jargon into business-friendly language.
• Proven ability to audit IT environments and provide security and process recommendations.

Desired Experience:

• A minimum of 5 years of experience in information security or networking.
• Exceptional customer service skills.
• Strong analytical thinking and problem-solving abilities.
• Excellent communication skills.
• Self-management and a team-oriented mindset.
• Project management skills.
• Deadline-driven and detail-oriented.
• Highly motivated.

Requirements:

• High School Diploma or equivalent.
• Ability to work US hours (CT)

Preferred:

• Bachelor's Degree in Information Technology.
• Certification in a relevant security-related industry, vendor, or professional certification.