Cybersecurity Consultant (AIR)

LevelBlue reduces risk and builds lasting resilience so organizations can innovate and advance their mission with confidence. As the world’s most analyst-recognized and largest pure-play managed security services provider, LevelBlue elevates client outcomes that matter: stronger defense, faster response, and sustained business continuity. LevelBlue combines AI-powered security operations, advanced threat intelligence, and elite human expertise to provide the most comprehensive portfolio of strategic advisory, managed security, offensive security, and incident response services.
About the Role
LevelBlue’s Professional Services Organisation is seeking an experienced Cyber Security Consultant to join our growing Security Consulting practice. This is a client-facing delivery role focused on helping organisations across a range of sectors identify, assess, and address their most pressing security challenges — spanning SIEM, Identity, security architecture review and Endpoint Detection & Response (EDR) technologies.
As a Cyber Security Consultant, you will work across the full engagement lifecycle — from scoping and discovery through to delivery, reporting, and client presentation. You will operate with a good degree of autonomy on engagements while drawing on the wider LevelBlue practice for specialist support and peer review. The role suits someone with a solid technical foundation who is equally comfortable translating findings into clear, business-relevant guidance for client stakeholders at all levels.
This role offers a clear development pathway toward Senior Consultant and Principal Consultant levels within the LevelBlue Professional Services career framework, with access to structured mentoring, certification support, and exposure to a broad portfolio of client environments.
Responsibilities
Engagement Delivery
• Deliver AIR engagements across a range of service lines including greenfield SOC builds, SIEM platform implementations (Microsoft Sentinel, Splunk, SentinelOne (AI SIEM), LogRhythm, etc.), EDR deployments (various), and managed security service transitions.
• Perform assessments across Microsoft Purview, Entra ID, Copilot for Security and Azure.
• Produce high-quality, client-ready deliverables: High Level Designs, Low Level Designs, Statements of Work, implementation guides, operational runbooks, and use-case documentation.
• Plan, facilitate, and document client workshops, steering committees, and executive briefings - managing outputs, decisions, and action items to closure.
• Develop business cases and ROI analyses for proposed security programmes, presenting findings to functional managers and senior executive stakeholders.
• Identify and document programme risks, assumptions, dependencies, and constraints; shape governance frameworks appropriate to engagement scale and client maturity.
• Build client technology roadmaps aligned to their security strategy, threat profile, and budget constraints.
• Manage scope and delivery expectations proactively, escalating commercial or delivery risks before they affect client outcomes.
Pre-Sales & Business Development
• Support the sales team on pre-sales activities — contributing technical input to scoping discussions, proposal development, and client presentations for prospective engagements.
• Contribute to bid responses, scope definitions, and commercial frameworks for new and renewal engagements.
Practice Contribution
• Contribute to the development and maintenance of LevelBlue service methodologies, delivery templates, proposal assets, and internal knowledge resources.
• Stay current with the evolving threat landscape, attacker techniques, and relevant vendor and platform developments — sharing insights with the team and incorporating learnings into client advisory.
• Participate in peer review of deliverables, contribute to team knowledge-sharing sessions, and actively engage with the LevelBlue professional development framework.

Experience & Qualifications
Essential Experience
• 3–6 years of hands-on experience in cyber security consulting, managed security services, or an in-house security function, with demonstrable client-facing or stakeholder engagement experience.
• Solid grounding in core security domains including network security, identity and access management, endpoint protection, cloud security, and vulnerability management — with the ability to discuss each in both technical and business-risk terms.
• Strong domain expertise in one or more of the following, with working knowledge across all:
• SIEM design, build, and operationalisation - Microsoft Sentinel/Splunk/SentinelOne (AI SIEM)/LogRhythm
• Security Operations Centre (SOC) design, build, and transformation - including greenfield and transition engagements
• Endpoint Detection & Response (