Senior Cybersecurity Consultant, Blue Team Lead

Senior Cybersecurity Consultant, Blue Team Lead
Summary

We are looking for a seasoned Senior Cybersecurity Consultant to serve as a hands‑on team lead within our Security Operations practice. This is a high‑impact, client‑facing role for a blue team professional who thrives in dynamic consulting environments, brings deep technical expertise across the defender stack, and has the leadership presence to mentor junior analysts and guide SOC operations across a diverse client portfolio.

You will be the subject matter expert our clients rely on, leading incident response engagements, optimizing endpoint and detection strategies, and building security‑aware cultures across organizations of varying size and maturity.

SOC Team Leadership and Oversight

• Lead and manage a team of SOC analysts, providing day‑to‑day direction, mentorship, and performance guidance
• Establish and continuously improve SOC workflows, escalation procedures, and response playbooks
• Serve as a technical escalation point for complex incidents and client inquiries
• Foster a culture of continuous improvement, knowledge sharing, and professional development within the team
• Configure, deploy, and manage endpoint detection and response (EDR) and extended detection and response (XDR) platforms across diverse client environments, adapting quickly to each client’s existing toolset
• Optimize detection policies and sensor configurations to balance security effectiveness with operational continuity
• Generate, interpret, and present security reporting to identify threat trends and drive risk reduction recommendations
• Maintain currency with evolving EDR/XDR capabilities, platform updates, and industry best practices
• Lead end‑to‑end incident response engagements from initial triage through containment, eradication, and post‑incident review
• Analyze alerts, telemetry, and indicators of compromise to assess scope, severity, and business impact
• Coordinate cross‑functional response activities and communicate clearly with both technical teams and executive stakeholders
• Produce thorough incident documentation including root cause analysis, lessons learned, and strategic remediation roadmaps
• Design and deliver targeted security awareness programs tailored to client workforce profiles and risk posture
• Develop engaging training content addressing phishing, social engineering, insider threats, and secure behaviors
• Execute simulated phishing campaigns, analyze outcomes, and provide actionable improvement recommendations
• Track training effectiveness metrics and iterate program design based on data‑driven insights
• Provide strategic security consulting and tactical recommendations aligned to client business objectives
• Support security assessments, gap analyses, audits, and compliance initiatives
• Contribute to the development and refinement of security policies, standards, and procedures for clients and internal practice growth
• Stay ahead of the evolving threat landscape, emerging vulnerabilities, and advancing security technologies

• Industry certifications such as CISSP, GCIH, GCIA, CEH, Security+, or platform‑specific credentials
• Experience operating across multiple EDR/XDR platforms (e.g., Crowd Strike, Sentinel One, Microsoft Defender, Carbon Black) and SIEM solutions (e.g., Splunk, Microsoft Sentinel, IBM QRadar, Elastic)
• Familiarity with compliance frameworks including NIST CSF, ISO 27001, PCI‑DSS, HIPAA, or SOC 2
• Prior experience in a cybersecurity consulting or managed security services (MSSP) environment
• Scripting or automation skills (Python, Power Shell, KQL, or similar) to support detection engineering and operational efficiency

You are a builder and a leader, someone who can step into a…