Cybersecurity SecOps Consultant

This is a fully remote position, open to applicants in United States.

📋 Description

• Provide guidance to customer cybersecurity leaders regarding SecOps strategy, operational priorities, technological initiatives, and actionable enhancements.

• Convert cybersecurity requirements into executable scopes, specifications, workstreams, milestones, dependencies, risks, responsible parties, and implementation strategies.

• Steer cross-functional cybersecurity projects involving security operations, engineering, application and infrastructure teams, vendors, and business stakeholders.

• Organize working sessions, address dependencies, facilitate decision-making, and uphold delivery discipline utilizing tools such as Jira and Confluence.

• Offer technical and advisory leadership in areas such as security engineering, SIEM and security-data platforms, incident response, AI-defense, platform migrations, data onboarding and routing, integrations, detections/use cases, security analytics, SOAR, workflow orchestration, and automation.

• Assess technical methodologies, question assumptions, pinpoint gaps, evaluate cybersecurity tools and emerging technologies, and create recommendations for selection, deployment, configuration, integration, and support frameworks.

• Articulate and convey security performance, risks, and outcomes through metrics, Key Risk Indicators (KRIs), status reports, decision documentation, and communications suitable for executives.

• Serve as a liaison between technical teams and leadership.

⛳️ Requirements

• Over 7 years of relevant experience in cybersecurity, including substantial hands-on involvement in Security Operations / SecOps, security engineering, architecture, implementation, or technical consulting.

• Direct experience with SIEM, SOAR, and security-data platforms, specifically Splunk and/or Cribl.

• Proficiency in data pipelines, onboarding, integrations, migrations, use-case development, or related service delivery.

• Strong comprehension of contemporary cybersecurity operations, encompassing security monitoring and detection, incident response, security engineering, security data, integrations, operational workflows, and SIEM principles.

• Proven experience leading technical cybersecurity projects or workstreams and converting broad or ambiguous technical goals into actionable strategies and measurable results.

• Excellent consulting and stakeholder leadership abilities in cybersecurity, including discovery, requirements gathering, facilitation, problem-solving, executive communication, and documentation.

• Familiarity with enterprise cybersecurity technologies and integrations such as Splunk, Cribl, Microsoft Sentinel/Defender, CrowdStrike, Palo Alto Networks, ServiceNow, SOAR platforms, endpoint security, Jira, and Confluence.

• Knowledge of cybersecurity governance, risk, and frameworks such as the NIST Cybersecurity Framework and NIST SP 800-53.

• Previous experience with ServiceNow Security Operations and/or CMDB is preferred.

• Background in supporting regulated, critical-infrastructure, or highly controlled cybersecurity environments is preferred.

• Experience in developing executive security metrics, KRIs, dashboards, security architectures, operating models, or engineering support frameworks is preferred.

• Relevant cybersecurity certifications such as CISSP, CompTIA Security+, GIAC, or vendor-specific security/SIEM certifications are preferred.

• Certifications in PMP, Agile, Scrum, or similar delivery methodologies are advantageous but not essential.

🏝️ Benefits

• Medical insurance

• Dental insurance

• Vision insurance

• Flexible Spending Accounts

• Short Term Disability

• Long Term Disability

• Life Insurance and Accidental Death & Dismemberment (AD&D)

• Option to purchase additional Life Insurance and AD&D

• Paid Time Off

• Personal Leave

• Holidays

• 401(k) plan with company match

• Work/life balance

• Ongoing learning and professional growth opportunities