Senior Cybersecurity Consultant

As a trusted advisor in the professional services industry, you know what matters most to clients: Big thinking with a personal focus. You also know what matters most to your own success, including: career growth, work-life flexibility, leadership that cares about your ability to succeed, the opportunity to give and receive one-on-one coaching and mentoring, as well as learning opportunities that inspire professional development. Experience them all at Schneider Downs, where we’ve been providing accounting, tax, consulting, business advisory and wealth management services through our team of innovative thought leaders for over 65 years. Start building a career with people motivated to help you succeed—and enjoy more of what counts.
As a Senior Cybersecurity Consultant, you will be an innovator who will dive deep into a large number of unknowns, using your security expertise to uncover problems within client environments and identify opportunities to increase the overall capabilities of Schneider Downs’ Cybersecurity practice. In this role, you will leverage your knowledge and experience across a broad base of cyber security disciplines to advise clients in leading practice strategy and tactical implementation of controls. Your responsibility will additionally include support of our incident response and digital forensics offerings and will require you to engage with client senior leadership, developing other junior team members and leading our organization’s initiatives. The ideal candidate will be passionate about cybersecurity and progressing the cyber maturity of our clients, and will have the opportunity to engage with systems that are at the cutting edge of technology and scale.
We understand the importance of work-life balance. That's why we've embraced a hybrid work model, allowing you to enjoy the flexibility of working from home as well as in the office.
Learn more about what it’s like working at Schneider Downs here: https://tinyurl.com/52t4kshw
WHAT YOU’LL DO
• Support large-scale technical and non-technical assessment projects for clients
• Provide cyber consulting from a vCISO-like perspective helping drive change year over year for our clients
• Develop custom reports based on data from multiple data sources, including security appliance, network sensors, outside intelligence feeds and audit data
• Present technical material in a clear, organized briefing to a mix of technical and non-technical personnel to include the board of directors of large and small companies
• Fully scope and present findings for a broad range of incidents from Nation state APT to financially motivated cyber-crime incidents
• Maintain current knowledge of existing public toolsets, Tactics Techniques and Procedures (TTP) used by advanced persistent threats
• Understand the best practice configuration for cybersecurity architecture elements such as EDR, XDR, SIEM, email filters, URL inspection, microsegemenation and PAM solutions
• Perform Table Top Exercises (TTX)
• Evaluate and improve existing Incident Response Plans (IRP)
• Perform Purple Team exercises to evaluate alerting and detection
• Evaluate hardening configurations of all hardware and Operating System (OS) types
• Assess the security and configuration of Active Directory and Group Policy Objects
• Evaluate cloud (AWS, G-Suite, Office 365) configurations against best practice configurations
• Develop detailed reports on root cause analysis and recommendations related to computer incidents
WHAT YOU’LL NEED
Required:
• Bachelor’s degree in Computer Science, Cybersecurity, Digital Forensics, Electrical Engineering, Information Assurance, Information Systems, Information Technology, Management Information Systems (MIS), or related field
• Minimum of three years of cybersecurity experience, including a comprehensive understanding of cybersecurity frameworks
• Prior cybersecurity consulting experience
• Understanding of leading cyber security frameworks (NIST 2.0, CIS IG3, etc.)
• Understanding of legal, regulatory and compliance requirements (e.g., GDPR, PCI, HIPAA, SOX, etc.)
• Experience with advanced computer exploitation methodologies
• Understanding of the workings and analysis of TCP/IP network communication protocols
• Practical working knowledge of the incident response lifecycle (i.e., detection, identification, containment, analysis, remediation and reporting)
Preferred:
• Related certifications (e.g., CISSP, GCIH, GCFE, GCFA, GREM, GNFA, A+, Network+, and/or Security+)
Other:
• Collaborate with all local and remote team members and keep them on task and on time with existing engagements
• Ability to integrate data from multiple sources and present concise, relevant information to a non-technical audience
• Strong communication and presentation skills, along with the ability to work in a highly collaborative environment
WHERE CULTURE COUNTS
At Schneider Downs, our culture is our identity. And it’s our culture of care that makes us unique. Even as we grow, we work hard to retain this culture to continuously promote a positive, supportive work environment through our core values: Care & Respect, Integrity, Be Great, Adaptive and We Not Me.
ENJOY MORE OF THE THINGS THAT MATTER MOST
• Competitive compensation
• Insurance, including health, dental, and vision, that begin on day one
• 20+ days of paid time off and 13 paid holidays
• Flex Fridays and office closures for summer and winter breaks
• Parental leave, family care leave, and volunteer time
• 401(k) plans and profit sharing
• CPA exam bonus, education assistance program, and pet insurance
A PLACE WHERE INCLUSIVITY COUNTS