Security Consultant (Microsoft Stack)

ProArch•Rochester, NY

About The Position

The Security Consultant is the primary client-facing owner for assigned security programs and managed security engagements. The role leads security strategy, sets delivery priorities and technical standards, directs onboarding and service improvement, and owns executive communication, risk recommendations, and escalation outcomes. The consultant remains hands-on with ProArch security platforms while providing technical direction, prioritization, and escalation support to Security Specialists, who handle day-to-day monitoring, investigation, and operational tasks under established playbooks. Working across client stakeholders and ProArch delivery teams, the Security Consultant is accountable for service quality, solution health, measurable risk reduction, and continuous program improvement. The position requires ongoing training and professional certifications. Travel is required as needed for client onsite kickoffs, workshops, and escalations, primarily in Upstate NY with occasional out-of-state travel.

Requirements

At least 4 years of experience in cybersecurity, with additional background in security consulting or managed security services.
Hands-on experience with Microsoft security platform components, including Defender for Office 365, Defender for Identity, Defender for Cloud Apps, Defender for Cloud, and Intune.
Hands-on SIEM/XDR delivery and operations experience, particularly Microsoft Sentinel and Microsoft Defender XDR.
Knowledge of identity and endpoint security fundamentals, such as Entra ID, Identity Protection, and Defender for Endpoint.
Kusto Query Language (KQL) skills for detection, investigation, and reporting; SPL is a plus.
Experience with vulnerability management tools and processes, such as Qualys, and developing remediation strategies.
Experience with security awareness training platforms and programs, such as KnowBe4, including campaign administration, phishing simulations, reporting, and remediation follow-up.
Scripting or automation experience using PowerShell, Python, and/or Azure CLI.
Outstanding written, verbal, technical, non-technical, communication, and presentation skills.
Self-directed and able to prioritize and handle multiple concurrent tasks to a high standard.
Proven collaborator with experience mentoring and guiding a highly technical team.
Commitment to continued learning, improving skills, earning certifications, and gaining industry knowledge.
Ability to lead client conversations to advance security strategy and program improvement.
Exceptional analytical skills.
Ability to communicate clearly in English, both written and spoken, with technical and non-technical stakeholders.
Ability to prioritize effectively and handle shifting priorities professionally.
Ability to produce and review reports supporting project deliverables.
Ability to create clear remediation recommendations based on industry best practices.
Ability to work effectively with internal and external clients.
Ability to document and explain technical details concisely and clearly.
Ability to manage personal schedules and project tasks.
Must hold Microsoft AZ-900, SC-300, and AZ-500 certifications, or attain them within 6 months after hire.
BS or MS in Computer Science or Engineering, or significant demonstrable experience in Microsoft Cloud Security.
Travel as required for client onsite kickoffs, workshops, and escalations, primarily in Upstate NY with occasional out-of-state travel.

Nice To Haves

Microsoft Purview (IRM, DLP, Insider Risk) and governance concepts.
SOAR and automation concepts and process design.
Managed Detection and Response (MDR) experience and detection engineering in a managed services model.
CrowdStrike Endpoint, Identity, or XDR experience.
Cloud security exposure beyond Microsoft, including AWS/GCP and related security services.
Experience with Azure DevOps and process-driven delivery.
Familiarity with Microsoft Foundry, Microsoft 365 Copilot, and Microsoft Security Copilot.
ISC2 CISSP certification.
Microsoft SC-200 certification.
Certifications such as CEH, CCSP, or CISM.

Responsibilities

Lead security strategy development and roadmap planning aligned to client business priorities.
Produce and deliver executive security reporting on risk, trends, outcomes, and next steps.
Provide security assessments, vulnerability management guidance, and awareness program support for managed and professional services engagements.
Act as a trusted adviser to clients and internal teams, providing strategic guidance for security challenges and objectives.
Lead consultative engagements, including requirements gathering, security workshops, assessments, and proofs-of-concept.
Help clients improve solution adoption and ensure solutions meet their needs.
Identify obstacles and potential issues in security solution delivery and proactively address them with management.
Support smooth project execution and client satisfaction through leadership and problem-solving.
Develop and implement best practices and methodologies for successful cybersecurity solution delivery.
Own solution implementation and program onboarding, including documentation, handoffs, and acceptance criteria.
Implement and manage SIEM/XDR architecture, including Microsoft Sentinel and Microsoft Defender XDR configuration, tuning, and workflows.
Maintain solution health and integrations, including connectors, data sources, agents, and alert fidelity.
Manage accounts, permissions, and governance for security solutions.
Provide technical guidance and escalation support to Security Specialists; lead triage, stakeholder communication, corrective-action tracking, and resolution of security incidents and service issues.
Support presales meetings, proof-of-value and proof-of-concept efforts, and security program cost and scope modeling.
Deliver vendor and ProArch workshops and contribute to presentations, webinars, and approved marketing initiatives.
Research and evaluate emerging technologies and contribute to solution design and service evolution.
Deliver services using ProArch standard playbooks, templates, quality gates, and reporting packs.
Improve programs through automation and security engineering where appropriate to increase repeatability and reduce manual effort.
Provide weekly time accounting and monthly expense reports.
Travel as required for client onsite kickoffs, workshops, and escalations.