Nightwing is seeking a Senior Cyber SecurityConsultant who is responsible for providing strategic cybersecurity consultation. This person will be onsite in the client's headquarters as a representative of Nightwing. This role involves consulting with client representatives on a daily basis to advance their cybersecurity posture, investigating complex security incidents, and continuously improving security operations.
This role requires onsite 5 days per week during training period. After training period, hybrid work schedule is available based on client policy.
Key ResponsibilitiesStrategy & Collaboration- Proactively identify gaps in client security program and architecture and recommend solutions
- Serve as a communications bridge between multiple cyber teams
- Participate at executive level meetings as organizational representative, and provide strategic input on cybersecurity roadmaps
- Develop security solutions/processes that are mindful of operational budget constraints
Security Monitoring & Analysis- Monitor security alerts and events from SIEM, IDS/IPS, EDR, and other security tools
- Provide guidance on complex investigations and escalations
- Analyze complex security incidents and determine scope, impact, and root cause
- Correlate data from multiple sources to identify sophisticated attack patterns
- Participate in on-call rotation if needed for surge support or incident investigation
- Contribute to SOC process improvements and automation initiatives
Incident Response- Lead incident response efforts for high-severity security events
- Contain, eradicate, and recover from security incidents
- Document incidents thoroughly and create detailed reports
- Perform post-incident reviews and develop lessons learned
- Coordinate with IT teams and stakeholders during incident response
Threat Intelligence & Detection Engineering- Recommend tuning and develop use cases to reduce false positives and improve alert quality
- Create and maintain playbooks and standard operating procedures
- Contribute to threat intelligence sharing and analysis
Reporting & Communication- Prepare detailed reports and executive summaries
- Present findings to management and technical teams
- Maintain accurate documentation of procedures and investigations
- Communicate effectively with stakeholders across the organization
Required QualificationsExperience- Bachelor's degree in a related field
- Must have a minimum of 7+ years of experience in cybersecurity
- 3+ years of hands-on experience with SIEM platforms, Microsoft Sentinel required
- Experience in client-facing role or consulting is preferred
- Proven experience in incident response
- Experience with endpoint detection and response (EDR) tools
Technical Skills- Deep understanding of network protocols, architecture, and security
- Proficiency in log analysis and security event correlation
- Familiarity with threat frameworks (MITRE ATT&CK, Cyber Kill Chain)
- Strong understanding of Windows, Linux, and cloud environments
- Experience with scripting languages (Python, PowerShell, Bash)
Key Competencies- Proactive and self-motivated
- Risk-management and budgetary awareness
- Strong analytical and problem-solving abilities
- Excellent written and verbal communication skills
- Ability to work under pressure during security incidents
- Team player with collaborative mindset
- Continuous learning attitude
Preferred Qualifications- Experience managing SOC
- Experience providing Cybersecurity Consultation services
- Experience with cloud security (AWS, Azure, GCP)
- Knowledge of SOAR platforms and security automation
- Threat intelligence platform experience
- Project Management experience
- One of the following certifications:
- GIAC Security Essentials (GSEC)
- GIAC Certified Incident Handler (GCIH)
- Certified Information Systems Security Professional (CISSP)
- GIAC Cyber Threat Intelligence (GCTI)
- Certified Ethical Hacker (CEH)
- Or equivalent industry certifications
Work Environment- On-call may be required for surge support or active incidents.
- Training period requires onsite in office 5 days a week. Hybrid option consistent with client site requirements will be available after training period.
- Fast-paced, high-pressure environment during incidents
