Cybersecurity Consultant II

Wipfli Advisory LLC•Chicago, IL

9d•$66,000 - $89,000•Hybrid

About The Position

Under the direction of a Senior Consultant or Manager, the Cybersecurity Consultant II develops and delivers consultative and technical cybersecurity solutions to help clients identify risk, strengthen controls, and improve business processes and information technology. The Consultant II manages assigned portions of engagements, works independently for short periods, and interacts regularly with clients and others outside of Wipfli. This is a hybrid opportunity, with an expectation to work in the office two days per week (Tuesday and Thursday). Preferred candidates are located in the Minneapolis, Milwaukee, or Chicago markets.

Requirements

Bachelor’s degree in information security, cybersecurity, information technology, or a related discipline, or an equivalent combination of education and relevant experience.
At least one year of relevant work experience in a professional services firm, or three or more years of private-industry experience focused on cybersecurity, information technology, or a related technical area.
Experience performing vulnerability assessments and using relevant tools and techniques, such as Nessus Professional, Tenable Vulnerability Management, Nipper Studio, Burp Suite, Wireshark, or Nmap.
Working knowledge of IT infrastructure and components, including applications, systems, networks, servers, endpoints, cloud and SaaS environments, virtualization, storage, backup and recovery solutions, and TCP/IP networking.
Ability to work toward obtaining additional certifications appropriate to the role.

Nice To Haves

Experience and interest in social engineering exercises, including OSINT research, email phishing, pretext calling, and physical penetration testing engagements.
Entry-level certifications such as CompTIA A+, Security+, or Network+, or a desire to obtain relevant certifications.
Prior consulting, advisory, training, or client support experience.
Experience with compliance requirements or professional standards associated with cybersecurity or information technology.

Responsibilities

Execute security and risk consulting engagements, including social engineering, security assessments, and vulnerability testing services.
Perform technical vulnerability assessments of clients’ internal and external networks, network devices, applications, and cloud configurations.
Perform social engineering consulting services, including open-source intelligence research, email phishing simulations, pretext calling, and physical penetration testing, to assess employee awareness of social engineering techniques.
Link client requirements to standard cybersecurity solutions and service offerings with guidance from senior team members.
Coordinate assigned engagement activities with clients; perform testing, analyze results, identify risks and capability gaps, recommend remediation, prepare reports, and present results to management.
Oversee assigned segments of work and thoroughly document work with clear explanations.
Inform project leaders of cost, quality, schedule, and scope risks; monitor personal time and project budgets; and communicate potential overages and availability in advance.
Maintain current knowledge of cybersecurity trends, threats, technical issues, and functional developments, and apply that knowledge to client circumstances.
Participate in continuing professional education and work toward obtaining and maintaining certifications appropriate to the area of expertise.
Contribute to research, development, review, and continuous improvement of cybersecurity consulting services and deliverables.
Mentor Consultant I associates in their development and support the sales process by identifying potential add-on opportunities and escalating client needs to senior team members.
Perform other duties as assigned to meet the responsibilities of the position and client expectations.