Principal Consultant - Security Consultant

About Us

NYSTEC is a nonprofit technology consulting company, advising agencies, organizations, institutions, and businesses since 1996. We are independent and vendor-neutral, so we act in our clients' best interests. At NYSTEC, we know that individuals and teams flourish personally and professionally, and our benefits and perks support that mindset.

About the Role

As a principal consultant – security consultant in the Cybersecurity and Data Privacy Practice, you will collaborate with team members to conceptualize, deliver, and support our clients through today's ever-changing cybersecurity landscape. NYSTEC is a trusted advisor, partner of choice, and employer of choice. We believe every interaction is an opportunity to deliver exceptional service that empowers client success.

Serving as a security consultant, your daily role will include conducting National Institute of Standards and Technology (NIST) 800‑30 based risk assessments; NIST 800‑53 based compliance assessments; vulnerability scanning, web application scanning, cloud security control assessments, and security educational outreach; and assessing vendor systems.

This position requires onsite work in Albany, NY. Candidates should reside within a commutable distance to Albany, NY.

Key Responsibilities

• Organize project work into client presentations outlining findings and recommendations.
• Participate in internal, public (conferences), and client‑facing meetings.
• Prepare reports and presentations.
• Assume full responsibility and accountability for executing projects or programs, including defining roles and responsibilities, conducting project planning and tracking activities, and communicating status upward and to client project managers.
• Share information proactively to make colleagues and clients more successful.
• Provide feedback to management on team member performance.
• Mentor and lead colleagues.

Required Qualifications

• Certified Information Systems Security Professional (CISSP) certification.
• Experience working in various security domains.
• Well versed in the software development life cycle (SDLC) and risk assessment, with ability to understand root causes of vulnerabilities and articulate them in written and verbal communications to clients.
• Expert knowledge of and experience with implementing and validating security controls and security governance.
• Experience with NIST 800‑30 style risk assessments.
• Ability to participate and collaborate in the business development and sales process by assisting with proposals, presentations, and new client activities.
• Willingness to seek knowledge and expertise through professional development within your specialty and apply it to improve quality and establish best practices.
• Ability to foster effective relationships with clients.

Preferred/Desired Qualifications

• Experience with vulnerability discovery techniques and tools.
• Experience and training with cloud computing environments and security considerations.
• Experience with artificial intelligence (AI)‑enabled solutions.
• Experience with incident response and disaster recovery.

Education and Experience

• A bachelor’s degree in cybersecurity or a related field of study and nine or more years of experience.

The target base salary for this position is $109,639.00 to $145,271.00 per year. When determining compensation, we analyze and carefully consider several factors, including skill set, experience, location, and job‑related qualifications.

It is NYSTEC's policy to provide equal employment opportunity (EEO) to all individuals, regardless of actual or perceived race, color, creed, religion, sex, or gender (including pregnancy, childbirth, and related medical conditions), gender identity or gender expression (including transgender status), age, national origin, ancestry, citizenship status, physical or mental disability, protected medical condition as defined by applicable state or local law, genetic information, military service and veteran status, sexual orientation, marital status, or any other characteristic protected by local, state, or federal laws and ordinances. NYSTEC is strongly committed to this policy and believes in the concept and spirit of the law.

Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please contact View email address on click.appcast.io if you require a reasonable accommodation to apply for or to perform this job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.

Applicants must be authorized to work in the United States without the need for visa sponsorship now or in the future.

Learn more about NYSTEC by visiting

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review Know Your Rights notice from the Department of Labor.