Security Consultant, Microsoft Stack

This is a fully remote position, open to applicants in New York.

📋 Description

• Lead the development of security strategies and roadmap planning that align with business objectives.

• Produce and deliver executive reports on security, addressing risks, trends, outcomes, and recommended actions.

• Provide guidance on security assessments, vulnerability management, and support for security awareness programs.

• Serve as a trusted adviser to clients and internal teams regarding security challenges and goals.

• Oversee consultative engagements, including the gathering of requirements, conducting security workshops, performing assessments, and executing proofs-of-concept.

• Enhance solution adoption and ensure alignment of solutions with client requirements.

• Identify and proactively resolve obstacles in the delivery of security solutions.

• Ensure successful project execution and client satisfaction through effective leadership and problem-solving.

• Develop and implement best practices and methodologies for cybersecurity solution delivery.

• Take ownership of solution implementation and program onboarding, covering documentation, handoffs, and acceptance criteria.

• Implement and manage SIEM/XDR architecture, including configuration, tuning, and workflows for Microsoft Sentinel and Microsoft Defender XDR.

• Maintain the health of solutions and their integrations, including connectors, data sources, agents, and alert fidelity.

• Manage accounts, permissions, and governance associated with security solutions.

• Provide technical guidance and escalation support to Security Specialists.

• Lead the triage of incidents and service issues, including stakeholder communication, corrective-action tracking, and resolution.

• Support presales meetings, proof-of-value/proof-of-concept initiatives, and modeling of security program costs and scope.

• Conduct vendor and ProArch workshops, and contribute to presentations, webinars, and approved marketing efforts.

• Research emerging technologies to contribute to solution design and service evolution.

• Deliver services using ProArch playbooks, templates, quality gates, and reporting packs.

• Enhance programs through automation and security engineering to improve repeatability and minimize manual effort.

⛳️ Requirements

• A minimum of 4 years of experience in cybersecurity, with additional expertise in security consulting or managed security services.

• Practical experience with Microsoft security platform components, including Defender for Office 365, Defender for Identity, Defender for Cloud Apps, Defender for Cloud, and Intune.

• Experience in delivering and operating SIEM/XDR solutions, especially Microsoft Sentinel and Microsoft Defender XDR.

• Understanding of identity and endpoint security fundamentals, including Entra ID, Identity Protection, and Defender for Endpoint.

• Proficiency in Kusto Query Language (KQL) for detection, investigation, and reporting; familiarity with SPL is a plus.

• Experience with vulnerability management tools and processes, such as Qualys, and developing remediation strategies.

• Familiarity with security awareness training platforms and programs, such as KnowBe4, including campaign administration, phishing simulations, reporting, and follow-up remediation.

• Skills in scripting and automation using PowerShell, Python, and/or Azure CLI.

• Proficient English communication skills, both written and verbal, capable of engaging with both technical and non-technical stakeholders.

• Strong written, verbal, technical, and presentation skills.

• Self-directed with the ability to prioritize and manage multiple tasks simultaneously.

• Experience in collaboration, mentoring, and guiding highly technical teams.

• Commitment to ongoing training and professional certifications.

• Ability to lead client discussions focused on security strategy and program enhancements.

• Exceptional analytical skills.

• Competence in producing and reviewing reports that support project deliverables.

• Ability to create remediation recommendations based on industry best practices.

• Capability to interface with both internal and external clients.

• Proficiency in documenting and articulating technical details clearly and succinctly.

• Ability to manage personal schedules and project-related tasks efficiently.

• Capacity to provide weekly time accounting and monthly expense reports.

• Willingness to travel as needed for client onsite kickoffs, workshops, and escalations, primarily in Upstate New York, with occasional out-of-state travel.

• A BS or MS in Computer Science/Engineering, or demonstrable significant experience in Microsoft Cloud Security.

• Must hold Microsoft AZ-900, SC-300, and AZ-500 certifications; if not already held at the time of hire, they must be obtained within 6 months of hiring.

• Preferred certifications include ISC2 CISSP, Microsoft SC-200, CEH, CCSP, and/or CISM.

• Preferred experience with Microsoft Purview, SOAR, MDR, detection engineering, CrowdStrike, AWS/GCP cloud security, Azure DevOps, Microsoft Foundry, Microsoft 365 Copilot, and Microsoft Security Copilot.

🏝️ Benefits

• Comprehensive health insurance plans.

• Competitive salary with performance-based bonuses.

• Opportunities for professional development and continuing education.

• Flexible work hours and remote work options.

• Supportive company culture focused on collaboration and growth.