Lead Security Consultant - Cyber Resilience

Qualifications

Required

• 8–12 years of experience in enterprise IT and cybersecurity, with 5+ years in a senior consulting or technical leadership role.
• Demonstrated experience serving as a technical SME within a pursuit or sales team, with a track record of contributing to the scoping, pricing, and winning of consulting engagements.
• Deep technical expertise across cyber resilience domains, including:
• Cyber recovery architecture: Cyber Vault design and implementation, Secure Isolated Recovery Environments (SIRE), air-gapped recovery infrastructure, and ransomware-resilient vault architectures that satisfy clean-recovery, forensic isolation, and malware-free validation requirements
• Backup and recovery tooling: hands-on knowledge of enterprise platforms including Veeam, Zerto, Commvault, Rubrik, Cohesity, Dell APEX Protection, Veritas NetBackup, Pure Storage SafeMode Snapshots, and cloud-native backup services (AWS Backup, Azure Recovery Services, Google Cloud Backup and DR)
• Disaster recovery design: RTO/RPO target definition, recovery strategy selection and trade-off analysis (active-active, active-passive, warm standby, cloud-native failover), DR runbook and playbook development, and failover/failback validation methodology
• Business continuity: Business Impact Analysis (BIA) facilitation, BC plan development and maintenance lifecycle, crisis management framework design, and BC/DR integration and alignment planning
• Incident response and cyber recovery integration: cyber recovery playbook development, clean-room recovery procedure design, forensic isolation techniques, and malware-free validation processes required prior to service restoration following a cyber event
• Cloud resilience architecture: multi-region and multi-cloud HA/DR design patterns across AWS, Azure, and Google Cloud Platform; cloud-native backup strategy, cross-cloud dependency mapping, and RTO/RPO design for cloud-hosted and hybrid workloads
• Working knowledge of resilience and security frameworks and standards, including:
• Cyber Resilience: NIST CSF 2.0, NIST SP 800-160 Vol. 2 (Developing Cyber-Resilient Systems), NIST SP 800-53 (CP family), MITRE Cyber Resiliency Engineering Framework
• Operational Resilience: EU Digital Operational Resilience Act (DORA), ISO 22316 (Organizational Resilience), Bank of England/PRA Operational Resilience requirements
• Business Continuity & Disaster Recovery: ISO 22301 (Business Continuity Management), ISO 27031 (ICT Readiness for Business Continuity), NIST SP 800-34 (Contingency Planning)
• Practical understanding of enterprise infrastructure resilience across key technology domains, including:
• Network resilience: BGP failover design, SD-WAN high availability, GSLB and DNS resilience (including Infoblox, F5 GTM, Apigee), front-door service continuity, and regional failover routing design
• Identity and authentication resilience: Active Directory replication and recovery design, Entra ID (Azure AD) HA architecture, privileged access continuity (CyberArk, BeyondTrust), and identity provider DR planning
• Storage and data protection: snapshot-based recovery architectures, immutable and air-gapped storage design, data replication topologies, and storage-layer RPO modeling across enterprise platforms (Pure Storage, NetApp, Dell EMC, Hitachi)
• Virtualization and compute: VMware vSphere/vSAN HA and DR design, Nutanix resilience, bare-metal recovery, and hybrid cloud DR orchestration
• Demonstrated consulting delivery competencies, including:
• Structured discovery and assessment: ability to design and execute current-state discovery engagements, conduct stakeholder interviews and technical SME sessions, manage complex information-gathering across large organizations, and synthesize findings into clearly structured, actionable outputs
• Gap analysis and maturity evaluation: experience assessing and communicati