IT & Cyber Security Consultant

OnTrac • Washington, DC

18h • $156,000 - $234,000 • Remote

About The Position

OnTrac is hiring an IT & Cyber Security Consultant! Are you eager to join a dynamic and expanding company where you can both learn and make a meaningful impact? If you possess a strong sense of empathy, enjoy assisting others, thrive in a fast-paced environment, and excel at problem-solving, we encourage you to apply today to connect with a recruiter! Founded in 1986, OnTrac has evolved into the leading provider of same-day and next-day delivery services in the U.S. for premier e-commerce and product-supply businesses, including five of the largest retailers in the U.S.
Location: Remote – This position may be performed remotely in states where the company is authorized to employ individuals. Washington D.C., Maryland, Virginia (Preferably)
Compensation: The expected starting base pay range for this position is $156,000. – $195,000. with full potential base salary range over a successful candidate’s tenure in the position of $156,000. – $234,000. Actual compensation will be determined based on experience, skills, internal equity, and other job-related factors.
Shift: Monday - Friday, 8:00am - 5:00pm (Hours subject to change based on the needs of the business)
Employment Logistics:
The IT & Cyber Security Consultant is responsible for designing, building, and maintaining robust security architectures across hybrid environments (on‑prem + cloud). You will enable the SOC by improving detection and orchestration capabilities and enable GRC by translating regulatory requirements into technical controls and automated evidence collection. This is a "hands-on-keyboard" role that requires the ability to pivot between deep technical engineering and assisting in strategic support

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field (or equivalent practical experience)
• 10+ years of progressive experience in IT and Security
• At least 3 years in a senior or lead engineering capacity
• Strong ability to code/script in Python, PowerShell, or Bash to automate repetitive security tasks and integrations
• Deep understanding of SIEM logic, YARA rules, and EDR configuration to improve detection efficacy
• Ability to interpret NIST CSF, ISO 27001, or SOC2 and implement the technical controls required to meet them

Nice To Haves

• Preferred CISSP, CISM, or hands-on technical certifications like GIAC (GCIA, GCDA) or Offensive Security (OSCP)
• You bring the “generalist” mindset, with proficiency across network security (firewalls, Zero Trust), endpoint protection, and cloud security (AWS/GCP).
• You communicate exceptionally, explaining deep technical vulnerabilities to non-technical risk stakeholders and translating risk/context back into technical action.
• You analyze complex issues with multiple variables and apply sound judgment in high-impact situations.
• You define methods and procedures for new assignments, selecting and adapting advanced techniques to achieve results
• You deliver innovative and effective solutions to challenging issues.

Responsibilities

• SOC + GRC enablement: Design and implement technical solutions that assist the SOC in alert orchestration (SOAR) and provide the GRC team with automated risk monitoring and evidence collection capabilities.
• Security integration: Lead the integration of security tools (EDR, SIEM, Cloud Security) to ensure a unified and visible security posture.
• Risk management support: Assist in technical risk assessments by identifying vulnerabilities and recommending/implementing remediation engineering.
• Architecture & engineering: Develop and maintain security infrastructure across hybrid environments (on‑prem/cloud), applying security by design to new deployments.
• Incident response escalation: Serve as a Tier 3 escalation point for complex incidents requiring deep forensic and/or architectural expertise.
• Mentorship: Guide junior engineers and analysts, fostering technical excellence and proactive security practices.

Benefits

• Medical, dental, and vision insurance
• Life and short- and long-term disability coverage
• 401(k) retirement savings plan with company match
• Flex vacation in states other than CA, CO, IL, MA, MT, and NE, with accruals up to 96 hours for first year of employment with tenure-based increases up to 160 hours
• Two (2) floating holidays per year
• Paid sick leave
• Six (6) paid company holidays
• Two (2) weeks paid pregnancy disability leave, four (4) weeks paid parental bonding leave
• Additional wellness and employee assistance programs

What This Job Offers

• Job Type: Full-time
• Career Level: Senior