Advisory Senior Consultant (Engineering)

SRA’s mission is to level up every day to protect our clients and their customers. This begins with our team members and their experience. SRA prides itself on maintaining a culture where team members have a shared sense of support and belonging, consistent with our It’s Personal company value. At SRA, we prioritize transparent career pathing, varied DEI programming and community groups, competitive benefits including mental health support, and an emphasis on a sustainable, healthy, and engaging work culture. SRA has twice been named a Best Place to Work by the Philadelphia Business Journal.   

These Essential Functions, Requirements, and Skills are guidelines. If you are a candidate who does not meet this exact job description but can demonstrate excellent organization, attention to detail, professionalism, flexibility, and self-direction in your professional background, we hope you apply. SRA values a diverse workplace and strongly encourages candidates of diverse backgrounds to apply.  

Summary/Objective  

The Senior Consultant position will be part of Security Risk Advisors’ Advisory practice. Our style of consulting is dynamic, innovative, fast-paced, and highly rewarding for both our clients and our team. This is an outstanding opportunity to work with a wide variety of tool sets and across various well-known client organizations.  

Candidates with experience as Systems Administrators, Systems Engineers, and/or IT Engineers are well-suited for this role and encouraged to apply.   

Essential Functions  

Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.  

• Engineer and implement cybersecurity solutions to meet client needs.    

• SIEM: Hands-on experience with SIEM platforms (e.g., Splunk, QRadar, LogRhythm, Microsoft Sentinel). 

• Ability to configure, tune, and analyze SIEM alerts for threat detection 

• Knowledge of log collection, parsing, and correlation rules 

• Cloud Security: Experience securing AWS, Azure, or Google Cloud environments. 

• Familiarity with cloud-native security tools (e.g., AWS Security Hub, Defender suite) 

• Understanding of IAM (Identity and Access Management), conditional access policies, and secure by default concepts 

• Endpoint Detection and Response (EDR): Hands-on experience with EDR platforms (e.g., CrowdStrike Falcon, Microsoft Defender ATP, SentinelOne). 

• Ability to analyze and respond to endpoint threats and incidents 

• Knowledge of malware analysis and forensic investigation 

• Understanding of Windows, Linux, and macOS security hardening 

• Familiarity with scripting (Python, PowerShell, Bash) for automation 

• Windows Administrative Experience: Group Policy or Microsoft Intune 

• Familiarity with how group policies are applied / managed and can be used to enforce security controls 

• Familiarity with the Microsoft Intune suite and how endpoints in a Microsoft environment can be natively cloud managed 

• Help Desk Experience or System Administrator Experience: 

• Has previously worked in a user-facing support role and can explain technical concepts to non-technical users while keeping their cool in tense situations 

• Has had administrative rights with the ability to effect change across a wide number of systems 

• Understands concepts like ring testing and can explain ways to mitigate change risk in an environment 

• Strong problem-solving skills to reduce problems into smaller, more manageable sizes.  
• Document evidence of work in reports and status updates.  

• Effectively communicate findings and strategy to client stakeholders including technical staff, executive leadership, and legal counsel.  

Requirements

Required Education and Experience  

• Bachelor’s degree in information technology, IT Security, Computer Science, Computer Engineering, or equivalent experience. 

• 3+ years’ professional experience in information security/cybersecurity engineering, systems administration, network security, or related field.  

• Knowledge of programming or scripting languages.  

• Punctuality and timely attendance to external client and internal stakeholder needs. 

Preferred Qualifications and Experience  

• Knowledge of Microsoft security tools. 

Competencies  

• Flexibility to accommodate changing schedules of client and project needs and willingness to work extended hours when