Cybersecurity Consultant II

At Wipfli, people count.

At Wipfli, our people are core to everything we do-the catalyst behind our ability to create exceptional impact and extraordinary results.

We believe in flexibility. We focus on relationships. We encourage each individual to follow their own path.

People truly matter and they feel it. For those looking to make a difference and find a professional home, Wipfli offers a career-defining opportunity.

Under the direction of a Senior Consultant or Manager, the Cybersecurity Consultant II develops and delivers consultative and technical cybersecurity solutions that help clients identify risk, strengthen controls, and improve business processes and information technology. The Consultant II manages assigned portions of engagements, works independently for short periods, and interacts regularly with clients and others outside of Wipfli.

Preferred candidates are located in the Minneapolis, Milwaukee, or Chicago markets. This is a hybrid opportunity, with an expectation to work in the office two days per week (Tuesday and Thursday).

Essential Responsibilities

• Execute security and risk consulting engagements, including social engineering, security assessments, and vulnerability testing services.
• Perform technical vulnerability assessments of clients' internal and external networks, network devices, applications, and cloud configurations.
• Perform social engineering consulting services, including open-source intelligence research, email phishing simulations, pretext calling, and physical penetration testing, to assess employee awareness of social engineering techniques.
• Link client requirements to standard cybersecurity solutions and service offerings with guidance from senior team members.
• Coordinate assigned engagement activities with clients; perform testing, analyze results, identify risks and capability gaps, recommend remediation, prepare reports, and present results to management.
• Oversee segments of work assigned by project managers or senior team members and thoroughly document work with clear explanations.
• Inform project leaders of cost, quality, schedule, and scope risks; monitor personal time and project budgets; and communicate potential overages and availability in advance.
• Maintain current knowledge of cybersecurity trends, threats, technical issues, and functional developments, and apply that knowledge to client circumstances.
• Participate in continuing professional education and work toward obtaining and maintaining certifications appropriate to the area of expertise.
• Contribute to research, development, review, and continuous improvement of cybersecurity consulting services and deliverables.
• Mentor Consultant I associates in their development and support the sales process by identifying potential add-on opportunities and escalating client needs to senior team members.
• Perform other duties as assigned to meet the responsibilities of the position and client expectations.

Required Qualifications

• Bachelor’s degree in information security, cybersecurity, information technology, or a related discipline, or an equivalent combination of education and relevant experience.
• At least one year of relevant work experience in a professional services firm, or three or more years of private-industry experience focused on cybersecurity, information technology, or a related technical area.
• Experience and interest in social engineering exercises, including OSINT research, email phishing, pretext calling, and physical pen test engagements.
• Working knowledge of IT infrastructure and components, including applications, systems, networks, servers, endpoints, cloud and SaaS environments, virtualization, storage, backup and recovery solutions, and TCP/IP networking.
• Ability to work toward obtaining additional certifications appropriate to the role.

Preferred Qualifications

• Experience performing vulnerability assessments and using relevant tools and techniques, such as Nessus Professional, Tenable Vulnerability Management, Nipper Studio, Burp Suite, Wireshark, or Nmap.
• Entry-level certifications such as CompTIA A+, Security+, or Network+, or a desire to obtain relevant certifications.
• Prior consulting, advisory, training, or client support experience.
• Experience with compliance requirements or professional standards associated with cybersecurity or information technology.

Additional Details:

Wipfli is an equal opportunity/affirmative action employer. All…