Senior Consultant, Proactive Services. Cloud & AI (Unit 42)

We are seeking an individual who is passionate about cyber security, curious with a demonstrated track record of continuous learning, and has the technical acumen to embrace data, technological and innovative approaches to deliver the best consulting outcomes for clients as they address today’s cyber threat landscape., We are seeking an individual who is passionate about cyber security, curious with a demonstrated track record of continuous learning, and has the technical acumen to embrace data, technological and innovative approaches to deliver the best consulting outcomes for clients, as they work to address the challenges associated with today’s cyber threat landscape., * SOC Advisory

• 4+ years of consulting experience in SOC, security engineering, SIEM administration, and incident management with demonstrable success serving large, multinational organisations in designing and implementing an organisation’s security operations program, organisational structures, and capabilities
• Deep technical knowledge in SIEM, SOAR, EDR/XDR, Next Gen Firewalls, Threat Intelligence and Hunting platforms
• Defensive Security Skills (desired)
• Experience in security operations design, engineering and/or analysis and investigations in complex environments with correlations across cloud, network, endpoint, and logs
• Ability to assess, identify improvements, and recommend enhancements to protect, detect and rapidly respond to modern threats
• Experience improving security operations capabilities such as asset visibility, threat detection, automation, case management, and compliance support
• Threat hunting and/or compromise assessments to identify IoCs or unknown threats
• Certifications including GIAC GDSA, GCIA, GMON, CISSP
• Understanding of frameworks such as 800-53, ISO 27001/2, PCI, CIS 18, CMMC
• Principal Cloud Security
• 4+ years of cloud security advisory and risk assessment experience
• Hands-on experience with AWS, Azure, GCP or similar
• Experience with Cloud Access Security Broker solutions (e.g., MCAS, Netskope)
• Knowledge of CASBs, Cloud Platforms and related dependencies (WAF, SSO, API Security, Cloud Security Posture Management)
• Experience with cloud migrations (cloud to cloud or on-prem to cloud)
• CLI or scripting knowledge in cloud environments is a plus
• Cloud Security skills (desired)
• Secure software development practices (SecDevOps)
• Knowledge of OWASP, MITRE ATT&CK & D3FEND, CIS, NIST CSF, CSA CCM & ISO 27107
• Certifications such as CSCP
• Understanding of cyber risk frameworks such as 800-53, ISO 27001/2, PCI, CIS 18, CMMC
• Cyber Risk Management
• Experience in cyber security threat & risk assessments to support strategy and roadmaps
• Proficiency in cyber risk, threat and control assessments, secure software practices, penetration testing, vulnerability assessments
• Knowledge of privacy, security, and compliance laws/regulations and related standards
• Familiarity with MITRE ATT&CK & D3FEND, CIS, NIST CSF, CSA CCM
• Strong communication and presentation skills
• Cyber Risk Management skills (desired)
• Threat modelling & application security risk assessments, secure software practices including SecDevOps
• FAIR Open-certified and experience applying FAIR for cyber risk quantification
• Certifications such as CISSP, CISM, CISA
• Understanding of risk frameworks such as 800-53, ISO 27001/2, PCI, CIS 18, CMMC, Your Experience
• 4+ years of experience performing cyber security consulting in at least two of the three domains above, with SME experience in one domain
• Track record in strengthening existing and developing new client relationships
• Ability to thrive in a startup environment
• Ability to travel as needed
• Potential to contribute across the practice and PANW product knowledge; ability to collaborate across internal and external stakeholders
• Bachelor’s Degree in Information Security, Computer Science, Digital Forensics, Cyber Security or equivalent professional experience