About the Role

The Cybersecurity Risk and Compliance Consultant plays a crucial role in ensuring the security of our clients' systems and data. This role oversees daily operations, identifies process improvements, conducts assessments, and provides expert cybersecurity support tailored to client needs. Consultants are also expected to support and mentor junior team members.

We are looking for a proactive, high-initiative consultant who wants to do real security work - not just ticket shuffling.

In this role, you'll split your time between frontline threat response (EDR, email, and identity alerts) and proactive security posture management (monthly policy reviews for client firewalls, EDR, and email systems).

We are specifically looking for someone who wants to grow into running our SOC. If you're a self-starter who gets frustrated by manual, repetitive tasks and immediately thinks, "How can I automate this?" - you'll fit right in.

Essential Duties & Responsibilities

The essential duties & responsibilities of the Cybersecurity Risk & Compliance Consultant role are outlined below in correlation with Dean Dorton's performance management impact areas.

Technical

Support client engagements and internal initiatives, requiring a variety of tasks that may include:

o Alert Triage & Response: Review, investigate, and remediate alerts across EDR, Email, and Identity platforms with strong autonomy.

o Security Posture Management: Perform monthly reviews of client security configurations (Firewalls, EDR policies, Email security) to ensure tools are actually doing their job.

o Process & Automation: Identify manual bottlenecks in our workflow and build scripts/automations to make the SOC faster and smarter.

o SOC Development: Help build processes, playbooks, and standards as you work toward a leadership role within the team.

o Conduct light security assessments and provide actionable recommendations.

o Identify and implement process improvements to strengthen security posture.

o Collaborate with clients to understand their security needs and tailor services accordingly.

o Provide guidance on current security trends, tools, and threats.

o Mentor junior cybersecurity consultants and support their growth.

Behavioral

Support MSS Client Engagements and Internal Initiatives, requiring a variety of tasks that may include:

• High Initiative & Ownership: You don't wait to be told what to do. If you see a problem or a gap in our coverage, you take the reins and fix it.

• Driven by Automation: You have a keen interest in scripting/automation (Python, PowerShell, API integrations, SOAR) to eliminate repetitive tasks.
• Long-Term Growth Mindset: You're looking for a home where you can stick around, master the environment, and step up to lead the SOC team over time.
• Communicate effectively with clients and team members, to understand evolving needs and provide proactive security support.
• Clear Communicator: You can explain technical issues clearly to team members and articulate policy recommendations effectively.
• Support the performance and quality of client engagements by managing tasks efficiently and identifying opportunities for improvement.
• Demonstrate confidence and sound judgment when making recommendations that reduce security risks and protect client data.
• Show flexibility and accountability by managing responsibilities effectively, adapting to evolving security needs, and contributing to a collaborative team environment.
• Maintain strong interpersonal relationships to ensure client satisfaction and trust.

Non-Charge

• Stay current on emerging cybersecurity trends, tools, and threats.
• Contribute to team knowledge sharing and internal process enhancements.
• Represent Dean Dorton's cybersecurity practice in client meetings and thought leadership.
• Support recruitment, onboarding, and professional development of team members.
• Champion Dean Dorton's culture and values in every engagement.

Requirements

Experience & Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Minimum of 2 years of experience in information security, with a focus on managed security services.
• Prior experience triaging and responding to security alerts
• Prior experience building scripts or automations to streamline security workflows
• Relevant certifications such as CISSP, CISM, or GIAC are preferred.

Essential Skills:

• Exceptional interpersonal and communication skills.
• Advanced problem-solving and analytical abilities.
• Strong understanding of security monitoring tools and processes.
• Ability to manage multiple projects and clients simultaneously.
• Proficiency in developing and implementing process improvements

Software & Tools

• Familiarity with security information and event management (SIEM) tools
• Experience with endpoint detection and response (EDR) solutions
• Experience with email security platforms
• Experience with Azure and O365 Security
• Knowledge of vulnerability management tools
• Knowledge of scripting/coding with PowerShell/Python
• Proficiency in using project management tools.

Travel:

This position requires minimal travel to Dean Dorton offices or client locations

Benefits

The Fun Stuff

Work isn't all work! We want to make your experience at Dean Dorton a great one. From your health and happiness to your long-term satisfaction, we focus on YOU! A few highlights are listed below:

• Flexible work schedules and environment
• Unlimited Paid Time Off (PTO)
• Paid family leave, medical leave, and maternity/paternity leave programs
• Retirement benefits, including a best-in-class employer match and automatic profit sharing.
• Telemedicine, mental health resources and wellness program reimbursement