Enterprise Cybersecurity Consultant

CYE is looking for an Enterprise Cybersecurity Consultant to join our architecture team within the Critical Cyber Operations Group. As an Enterprise Cybersecurity Consultant, you will act as the leading security architect with a global organization, addressing challenges with different stakeholders in applications, on-prem, or cloud-based infrastructure. You will align business needs to security needs, identify security vulnerabilities and risks, and offer viable plans to mitigate them.

Responsibilities

• Perform architecture reviews on designed or deployed environments, identifying security flaws and recommending mitigation plans.
• Act as the leading technical security authority in a global environment and as a trusted advisor on various topics.
• Lead, evaluate, and improve our clients' security posture by elevating their infrastructure’s resilience and implementing best-practice organizational procedures.
• Lead mitigation plans and design practical implementations for security issues; e.g., firewall policies review, segmentation and segregation recommendations, Microsoft AD-tier model implementation, etc.
• Research and advocate for new security solutions and technologies with stakeholders.

Qualifications

• At least 3 years of hands-on experience with securing large organizational networks, including security controls, OS hardening, network devices’ security, etc.
• Minimum of 2 years of experience in a client-facing role
• Significant experience in at least 3 of the following list:
• Vast knowledge and expertise in cybersecurity IT systems and cloud infrastructure
• Practical experience in consulting services and risk assessment
• Practical experience with security configuration and maturity assessment
• Deep understanding of Microsoft IT on-prem and cloud infrastructure, e.g., Azure-Ad, Office365, AD, GPO, protocols
• Practical experience with cloud environments (Azure – a significant advantage)
• Knowledge of security controls; e.g., AV, EDR/XDR, DLP, device control, etc.
• Experience with implementing security monitoring procedures and systems (SOC, SIEM, SOAR)
• Practical experience with SCADA protocols and OT environments

About UsCYE’s optimized cyber risk quantification platform and experts transform the way organizations manage cybersecurity. Using AI, machine learning, and data, CYE visualizes attack routes, quantifies cyber risk, provides mitigation plans, improves communication, and matures organizational cybersecurity. Founded in 2012, CYE is funded by EQT and 83North.