> Markdown version of [/jobs/ext/3006848-cybersecurity-consultants](https://www.wearedevelopers.com/jobs/ext/3006848-cybersecurity-consultants). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cybersecurity Consultants - **Company:** Boston Consulting Group - **Location:** Durham, WA, United States - **Experience:** Expert - **Salary:** $190,000.0 - **Contract:** Permanent contract - **Skills:** Software System Penetration Testing, Cloud Computing Security, Encodings, Cyber Security, Information Systems, Data Security, Disaster Recovery, Identity and Access Management, Information Systems Security Architecture Professional, Security Information and Event Management, Software Engineering, Systems Integration, Software Vulnerability Management, IT Architecture, Generative AI, GPT, Devsecops, Vulnerability Analysis - **Published:** September 19, 2026 - **Apply:** https://www.dice.com/job-detail/65d845fc-cc65-495a-b644-f6570e920eac ## About the Role * Team-oriented attitude. * Strong communication and presentation skills. * Outstanding analytical and conceptual skills. * Results-orientated mindset. * Confidence and persuasiveness. * GenAI tool fluency (e.g., demonstrated use of GenAI tools such as ChatGPT, Claude) and validation of responses. * Business-fluent written and spoken English language skills. * Willingness to travel around the globe to work with clients and BCG teams. At times, this role involves significant travel to client sites. The amount of travel will depend on client needs and nature of projects. ## Description * Technical experts. They are critical thinkers and have extensive cybersecurity expertise that drives innovative solutions. * Innovators. They understand and leverage cutting-edge cybersecurity approaches and tactics to create customized solutions for clients. * Change agents. They know how to make change happen across an organization. They can align and onboard teams to implement new cybersecurity process and toolsets. They embrace complex challenges and guide an organization to optimize their cybersecurity practices. * Collaborative. They are interdisciplinary team players who seek alignment and establish relationships ranging from cross-functional stakeholder groups to existing security teams. You're Good At: * Understanding the role technology plays in enabling businesses to execute their strategies and decomposing the cybersecurity implications of this relationship. * Analyzing cybersecurity standards, regulatory requirements, and best practices and translating that into a meaningful set of recommendations tailored to a client's unique environment and circumstances. * Communicating complex and technical concepts in a concise and business value-centric written form. * Implementing cybersecurity transformation and culture change initiatives. * Conducting cybersecurity assessments including gap analysis and roadmap development in multiple contexts, including organizations, product development, and cloud security. * Developing cybersecurity strategies, policies, processes, and procedures to protect clients' internal infrastructure and their customers. * Understanding data protection, data security, and privacy drivers that influence organizations today. * Developing cybersecurity business strategies for technology product vendors that are integrated in the organizations overall business strategy and increase revenue and profits. * Working with leadership teams, including facilitating board and senior management cybersecurity awareness workshops. * Embedding product security and DevSecOps practices into the software development lifecycles, system designs, and IT architectures. * Utilizing cyber risk quantification to reduce uncertainty around cyber risk and improve executive decision making. * Creating and facilitating table-top exercises. * Delivering operational resilience through incident response, business continuity, and disaster recovery planning. What You\'ll Bring * 6+ years of practical experience in cybersecurity consulting or cybersecurity management (with teams of five persons or more) in a variety of sectors and contexts. * BS in cybersecurity, information systems, mathematics, natural sciences, business management, or similar degree. * Hands-on experience with, or extensive knowledge of some of the following: + Developing cybersecurity strategies or policies. + Quantifying and managing cybersecurity risk. + Leading security assessments. + Designing, transforming, implementing, and running cybersecurity programs. + Developing security architectures. + Integrating security into applications and systems. + Implementing cloud security. + Managing cybersecurity risk arising from third parties and the supply chain. + Designing / implementing identity and access management. + Developing and upskilling a cybersecurity workforce. + Delivering cybersecurity culture change, awareness, and training. + Performing continuous monitoring activities such as using SIEM tools, APT hunting, implementing UBA, etc. + Designing / implementing vulnerability management, including conducting vulnerability assessments. + Performing penetration testing, incident management, BCP, and/or DRP. * Broad knowledge of cybersecurity technologies throughout organizational and acquisition lifecycle. * Working knowledge of at least two different cybersecurity frameworks: + NIST Cybersecurity Framework. + C2M2 + NIST SP 800-53 and companion publications. + ISO/IEC 27000 family of standards, etc. + Cloud Security Alliance CCM. ## Related Videos - [ Evaluating AI models for code comprehension](https://www.wearedevelopers.com/videos/1462-evaluating-ai-models-for-code-comprehension) - [A Brief History of Data Storage](https://www.wearedevelopers.com/videos/974-a-brief-history-of-data-storage) - [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines) - [Forecasting Cyber Attacks with Glassdoor Reviews - Lianne Potter](https://www.wearedevelopers.com/videos/2143-forecasting-cyber-attacks-with-glassdoor-reviews-lianne-potter) - [Speak, Code, Deploy: Transforming Developer Experience with Voice Commands](https://www.wearedevelopers.com/videos/1159-speak-code-deploy-transforming-developer-experience-with-voice-commands) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) ## Related Articles - [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)