Security Consultant

Hi,

• Administer and support enterprise security platforms including:
• Palo Alto Cortex
• Microsoft Defender
• Tanium
• Proofpoint
• Tessian
• Abnormal Security
• Configure, maintain, troubleshoot, and optimize security controls, policies, alerts, integrations, and automated response actions.
• Monitor platform health, licensing, agent status, and security effectiveness.
• Identify control gaps and recommend security improvements. 

• Administer Microsoft Exchange Online and email security infrastructure.
• Manage mail flow, transport rules, connectors, message tracing, anti-spam, anti-phishing, and quarantine processes.
• Investigate phishing campaigns, spoofing attempts, business email compromise (BEC), and other email security incidents.
• Coordinate security controls across Microsoft and third-party email security platforms.

• Respond to cybersecurity incidents across endpoints, email, identity, and cloud environments.
• Conduct threat hunting and investigation activities.
• Analyze indicators of compromise and coordinate remediation activities.
• Document findings, remediation efforts, and lessons learned.
• Assist with security monitoring and operational improvements.

• Improve detection capabilities and security configurations.
• Deploy and maintain security policies and controls.
• Support vulnerability management activities.
• Recommend enhancements to improve security posture and operational efficiency.
• Create and maintain technical documentation, standards, and procedures.

• 7+ years of enterprise IT and cybersecurity experience.
• Experience in:
• Security Engineering
• Security Operations
• Endpoint Security
• Identity Security
• Cloud Security

• 4+ years of recent hands-on experience with:
• Palo Alto Cortex
• Tanium
• Tanium Comply

• 3+ years of hands-on experience with:
• Proofpoint
• Tessian
• Abnormal Security

• 3+ years of Microsoft Exchange Online administration experience.
• Strong understanding of:
• Mail Flow
• Transport Rules
• Connectors
• Message Tracing
• Anti-Spam Controls
• Anti-Phishing Controls

• 3+ years of experience investigating and responding to cybersecurity incidents and performing threat hunting activities. 
• Microsoft Defender Security Suite
• Endpoint Detection and Response (EDR)
• Security Information and Event Management (SIEM)
• Cloud security technologies
• Identity security and access management
• Security documentation and reporting
• Strong analytical and troubleshooting skills
• Excellent verbal and written communication abilities