Cybersecurity Consultant II

Wipfli Advisory LLC•Wauwatosa, WI

9d•$66,000 - $89,000•Hybrid

About The Position

Under the direction of a Senior Consultant or Manager, the Cybersecurity Consultant II develops and delivers consultative and technical cybersecurity solutions to help clients identify risk, strengthen controls, and improve business processes and information technology. The role manages assigned portions of engagements, works independently for short periods, and interacts regularly with clients and other external parties. The position executes security and risk consulting engagements, including social engineering, security assessments, and vulnerability testing. It involves assessing client networks, devices, applications, and cloud configurations; analyzing results and identifying risks and capability gaps; recommending remediation; documenting work; and reporting and presenting findings to management. The Consultant II also coordinates engagement activities, monitors project budgets and schedules, keeps current with cybersecurity developments, contributes to improving services and deliverables, mentors Consultant I associates, and helps identify additional client needs. Preferred candidates are in the Minneapolis, Milwaukee, or Chicago markets. This is a hybrid opportunity with an expectation to work in the office two days per week, Tuesday and Thursday.

Requirements

Bachelor’s degree in information security, cybersecurity, information technology, or a related discipline, or an equivalent combination of education and relevant experience.
At least one year of relevant work experience in a professional services firm, or three or more years of private-industry experience focused on cybersecurity, information technology, or a related technical area.
Experience performing vulnerability assessments and using relevant tools and techniques, such as Nessus Professional, Tenable Vulnerability Management, Nipper Studio, Burp Suite, Wireshark, or Nmap.
Working knowledge of IT infrastructure and components, including applications, systems, networks, servers, endpoints, cloud and SaaS environments, virtualization, storage, backup and recovery solutions, and TCP/IP networking.
Ability to work toward obtaining additional certifications appropriate to the role.

Nice To Haves

Experience and interest in social engineering exercises, including OSINT research, email phishing, pretext calling, and physical penetration testing.
Entry-level certifications such as CompTIA A+, Security+, or Network+, or a desire to obtain relevant certifications.
Prior consulting, advisory, training, or client support experience.
Experience with compliance requirements or professional standards associated with cybersecurity or information technology.

Responsibilities

Execute security and risk consulting engagements, including social engineering, security assessments, and vulnerability testing.
Perform technical vulnerability assessments of clients’ internal and external networks, network devices, applications, and cloud configurations.
Conduct social engineering services, including open-source intelligence research, email phishing simulations, pretext calling, and physical penetration testing.
Connect client requirements to standard cybersecurity solutions and service offerings with guidance from senior team members.
Coordinate engagement activities with clients; conduct testing, analyze results, identify risks and capability gaps, recommend remediation, prepare reports, and present results to management.
Oversee assigned portions of engagements and thoroughly document work with clear explanations.
Inform project leaders of cost, quality, schedule, and scope risks; monitor personal time and project budgets; and communicate potential overages and availability in advance.
Maintain current knowledge of cybersecurity trends, threats, technical issues, and functional developments and apply it to client circumstances.
Participate in continuing professional education and work toward obtaining and maintaining appropriate certifications.
Contribute to research, development, review, and continuous improvement of cybersecurity consulting services and deliverables.
Mentor Consultant I associates and support the sales process by identifying potential add-on opportunities and escalating client needs to senior team members.
Perform other duties as assigned to meet position responsibilities and client expectations.