DescriptionThe Role Sygnia is seeking a
Cyber Security Consultant to join our growing Enterprise Security team in the United States. This is a highly technical consulting role focused on helping organizations assess, strengthen, and mature their cybersecurity programs through proactive security assessments and strategic advisory engagements.
You will work alongside some of the industry's leading cybersecurity experts to evaluate enterprise environments, identify security risks, and provide practical recommendations that improve security posture across on-premises, cloud, and hybrid infrastructures.
This is primarily a delivery-focused consulting role. Client relationship ownership is managed by Engagement Managers, allowing you to focus on delivering exceptional technical work while partnering closely with internal teams to ensure successful client outcomes.
Experience with Operational Technology (OT) and Industrial Control Systems (ICS) environments is highly valued as Sygnia continues expanding its capabilities across critical infrastructure and industrial sectors, though it is not required.
What You'll Do - Assess clients' security posture, enterprise architecture, technical configurations, and security controls to identify risks, gaps, and opportunities for improvement.
- Deliver proactive cybersecurity consulting engagements, including security assessments, architecture reviews, maturity evaluations, security roadmaps, and implementation guidance.
- Develop clear, actionable reports and present findings and recommendations to both technical teams and executive stakeholders.
- Provide practical guidance to help clients strengthen their security programs using industry best practices and risk-based recommendations.
- Support security incident response engagements and post-incident improvement initiatives as needed, representing approximately 20% of the role.
- Collaborate closely with Engagement Managers and technical specialists to ensure successful project delivery and exceptional client experience.
- Contribute to Sygnia's consulting methodologies, assessment frameworks, and internal knowledge sharing initiatives.
- Stay current on emerging threats, security technologies, and industry best practices to continuously enhance consulting capabilities.
- Support assessments involving cloud environments, identity security, enterprise infrastructure, and, when applicable, Operational Technology (OT) environments.
RequirementsWhat We're Looking For - At least five years of experience as a cybersecurity professional.
- Previous hands-on experience in one or more technical cybersecurity disciplines such as security engineering, security architecture, cloud security, application security, infrastructure security, network security, or similar technical roles.
- Experience performing Operational Technology (OT) or Industrial Control Systems (ICS) security assessments.
- Strong understanding of enterprise security architecture, security design principles, and modern security controls across on-premises and cloud environments.
- Demonstrated experience assessing complex technical environments, identifying security gaps, and providing practical, risk-based recommendations.
- Strong client-facing consulting skills, including the ability to clearly communicate technical concepts to both technical and executive audiences.
- Excellent written communication skills with experience developing professional assessment reports and technical deliverables.
- Strong analytical and problem-solving abilities with a structured, consultative approach.
- Comfortable working independently while collaborating across cross-functional technical teams.
- Willingness to travel approximately 20% for client engagements.
- Bachelor's degree in Computer Science, Information Security, Engineering, Information Systems, or a related technical discipline.
Bonus Points For - Experience delivering cybersecurity consulting or professional services engagements.
- Strong knowledge of ICS/OT security architecture, with hands-on experience implementing and configuring cybersecurity controls and industry standards.
- Familiarity with industrial control environments, manufacturing, utilities, energy, or critical infrastructure, including standards such as IEC62443 and NERC-CIP.
- Relevant certifications such as CISSP, OSCP, CEH, CCSP, CCSK, GIAC certifications, cloud security certifications, or equivalent technical expertise.
- Experience presenting findings and recommendations to senior leadership or executive stakeholders.
- Knowledge of industry frameworks such as NIST CSF, CIS Controls, ISO 27001, MITRE ATT&CK, or similar cybersecurity standards.
