Security Post Sales Architect and Implementation Consultant

About Level Blue

Level Blue is a leading provider of managed security services, combining AI‑powered security operations with advanced threat intelligence and elite human expertise.

Level Blue’s Professional Services Organisation is seeking an experienced Cyber Security Consultant to join our growing Security Consulting practice. The role is client‑facing and focuses on helping organisations across a range of sectors identify, assess, and address their most pressing security challenges, including SIEM, identity, security architecture review, and Endpoint Detection & Response (EDR) technologies.

As a Cyber Security Consultant you will work across the full engagement lifecycle — from scoping and discovery through to delivery, reporting, and client presentation — operating with a good degree of autonomy while drawing on our wider practice for specialist support and peer review.

This role offers a clear development pathway toward Senior Consultant and Principal Consultant levels within the Level Blue Professional Services career framework, with access to structured mentoring, certification support, and exposure to a broad portfolio of client environments.

• Deliver AIR engagements across a range of service lines, including greenfield SOC builds, SIEM platform implementations (Microsoft Sentinel, Splunk, Sentinel One AI SIEM, Log Rhythm, etc.), EDR deployments, and managed security service transitions.
• Perform assessments across Microsoft Purview, Entra , Copilot for Security and Azure.
• Produce high‑quality, client‑ready deliverables:
  High‑Level Designs, Low‑Level Designs, Statements of Work, implementation guides, operational runbooks, and use‑case documentation.
• Plan, facilitate, and document client workshops, steering committees, and executive briefings – managing outputs, decisions, and action items to closure.
• Develop business cases and ROI analyses for proposed security programmes, presenting findings to functional managers and senior executive stakeholders.
• Identify and document programme risks, assumptions, dependencies, and constraints; shape governance frameworks appropriate to engagement scale and client maturity.
• Build client technology roadmaps aligned to their security strategy, threat profile, and budget constraints.
• Manage scope and delivery expectations proactively, escalating commercial or delivery risks before they affect client outcomes.
• Support pre‑sales activities – contributing technical input to scoping discussions, proposal development, and client presentations for prospective engagements.
• Contribute to bid responses, scope definitions, and commercial frameworks for new and renewal engagements.
• Contribute to the development and maintenance of Level Blue service methodologies, delivery templates, proposal assets, and internal knowledge resources.
• Stay current with the evolving threat landscape, attacker techniques, and relevant vendor and platform developments – sharing insights with the team and incorporating learnings into client advisory.
• Participate in peer review of deliverables, contribute to team knowledge‑sharing sessions, and actively engage with the Level Blue professional development framework.

• 3–6 years of hands‑on experience in cyber security consulting, managed security services, or an in‑house security function, with demonstrable client‑facing or stakeholder engagement experience.
• Solid grounding in core security domains: network security, identity and access management, endpoint protection, cloud security, and vulnerability management – with ability to discuss each in both technical and business‑risk terms.
• Strong domain expertise in one or more of the following, with working knowledge across all: SIEM design, build, and operationalisation (Microsoft Sentinel, Splunk, Sentinel One AI SIEM, Log Rhythm); SOC design, build, and transformation;
  Endpoint Detection & Response (EDR) deployment, tuning, and integration;
  Managed Security Service integration.
• Experience with Microsoft Purview, Entra , Copilot for Security, Azure.
• Proven ability to produce and own senior‑level deliverables: HLDs, LLDs, SOWs, operational documentation, and…