Security Consultant

Job Description A Security Consultant is a client-focused role responsible for leading and supporting ProArch customers in building, operating, and continuously improving a comprehensive security program. This position blends security advisory, service delivery, and operational oversight, using ProArch standard playbooks, tooling, and reporting to reduce risk and improve security outcomes. Security Consultants leverage ProArch’s security platforms to detect and prevent cyber threats, onboard clients into managed security services, maintain solution health, and communicate risk and remediation priorities to technical and executive stakeholders. Ongoing training and professional certifications are part of the job requirements. JOB RESPONSIBILITIES Client Advisory & Program Leadership Lead security strategy development and roadmap planning aligned to business priorities. Produce and deliver executive security reporting (risk, trends, outcomes, and next steps). Provide security assessments, vulnerability management guidance, and awareness program support as part of managed services and professional services engagements. Service Delivery & Operational Oversight Own solution implementation and program onboarding, including documentation, handoffs, and acceptance criteria. Implement and manage SIEM/XDR architecture (e.g., Microsoft Sentinel and Microsoft Defender XDR) including configuration, tuning, and workflows. Maintain solution health and integrations (connectors, data sources, agents, and alert fidelity). Perform account/permission management and governance for security solutions. Provide guidance and escalation support for Security Specialists; coordinate incident and service issue escalations to resolution. Pre-sales & Practice Contribution Support presales meetings, proof-of-value/proof-of-concept efforts, and security program cost & scope modeling. Deliver vendor and ProArch workshops; contribute to presentations, webinars, and approved marketing initiatives. Research and evaluate emerging technologies; contribute to solution design and service evolution. Standardization & Continuous Improvement Deliver services using ProArch standard playbooks, templates, quality gates, and reporting packs. Improve programs through automation and security engineering (where appropriate) to increase repeatability and reduce manual effort. TECHNICAL SKILLS Candidate should have a minimum of 4 years of experience in cybersecurity with additional background in security consulting or managed security services. To be successful, this position requires hands-on capability in core security platforms, the ability to translate technical findings into business risk, and strong client communication. Required (hands-on) SIEM/XDR delivery and operations, particularly Microsoft Sentinel and Microsoft Defender XDR. Kusto Query Language (KQL) for detection, investigation, and reporting (SPL is a plus). SOAR and automation concepts and process design. Identity and endpoint security fundamentals (e.g., Entra ID, Identity Protection, Defender for Endpoint). Strong client-facing communication: security report analysis, remediation recommendations, and executive-ready storytelling. Working knowledge Microsoft security platform components (Defender for Office 365, Defender for Identity, Defender for Cloud Apps, Defender for Cloud, Intune, Entra ID). Managed Detection and Response (MDR) experience in a managed services model. Vulnerability management tooling and process (e.g., Qualys) and remediation strategy development. Scripting/automation using PowerShell, Python, and/or Azure CLI. Preferred Microsoft Purview (IRM, DLP, Insider Risk) and governance concepts. CrowdStrike Endpoint/Identity/XDR experience. Cloud security exposure beyond Microsoft (AWS/GCP) and related security services. Experience with Azure DevOps and process-driven delivery. Microsoft Foundry, Microsoft 365 Copilot, and Microsoft Security Copilot familiarity. This position requires that the applicant be a professional leader. ProArch is looking for a candidate who can fulfill the following: Outstanding Written, Verbal, Technical, Non-Technical, communication & presentation skills. Self-directed with the ability to prioritize and handle multiple tasks concurrently, and of high quality. Proven collaborator. Experience in mentoring and guiding a highly technical team. Eager learner continually improving skill sets, earning certifications, and gaining industry knowledge. Skilled in leading a conversation with client to drive security strategy and program improvement. Exceptional analytical skills. A well understood English dialect is a must. Ability to prioritize effectively and handle shifting priorities professionally. Produce and review reports to support project deliverables. Ongoing training and professional certifications are part of the job requirements. Create clearly stated remediation recommendations based on industry best practice. Successfully interface with clients, both internally and externally. Document and explain technical details in concise and clear manner. Manage personal schedule and project tasks. Provide weekly time accounting and monthly expense reports. Travel within upstate NY and occasionally out of state, as required. EDUCATION AND CERTIFICATION BS or MS in Computer Science / Engineering or significant demonstratable experience in Microsoft Cloud Security. Must have the following Certifications. If not held at time of hire, must be attained within 6 months after hire. Microsoft: AZ-900 Microsoft: SC-300 Microsoft: AZ-500 ISC: CISSP Preferred certifications: ISC2 CISSP; Microsoft SC-200; and/or certifications such as CEH, CCSP, CISM. #J-18808-Ljbffr