Security Consultant (Microsoft Stack)

ProArch•Rochester, NY

About The Position

The Security Consultant is the primary client-facing owner for assigned security programs and managed security engagements. The role leads security strategy, delivery priorities, and technical standards; directs onboarding and service improvement; and owns executive communication, risk recommendations, and escalation outcomes. The consultant works hands-on with ProArch security platforms while providing technical direction, prioritization, and escalation support to Security Specialists, who handle day-to-day monitoring, investigations, and operational tasks under established playbooks. The role works across client stakeholders and ProArch delivery teams and is accountable for service quality, solution health, measurable risk reduction, and continuous program improvement. Ongoing training and professional certifications are required. The consultant leads security strategy and roadmap planning, produces executive security reporting, and provides security assessments, vulnerability management guidance, and awareness program support. They lead client engagements such as requirements gathering, workshops, assessments, and proofs-of-concept, advise clients and internal teams, and support solution adoption and client satisfaction. They identify delivery obstacles, address issues with management, and establish best practices for successful delivery. Service responsibilities include owning implementation and onboarding; implementing and managing SIEM/XDR architecture, particularly Microsoft Sentinel and Microsoft Defender XDR; maintaining integrations and solution health; governing accounts and permissions; and providing technical guidance and escalation support. The consultant also supports presales and proof-of-value efforts, contributes to workshops and approved marketing activities, evaluates emerging technologies, follows ProArch playbooks and quality standards, and improves repeatability through appropriate automation and security engineering. The position requires at least four years of cybersecurity experience, with additional background in security consulting or managed security services. A BS or MS in Computer Science or Engineering is sought, or significant demonstrable experience in Microsoft Cloud Security. Required Microsoft certifications are AZ-900, SC-300, and AZ-500; certifications not held at hire must be earned within six months. Travel is required as needed for client onsite kickoffs, workshops, and escalations, primarily in Upstate New York with occasional out-of-state travel.

Requirements

At least 4 years of experience in cybersecurity, with additional background in security consulting or managed security services.
Hands-on experience with Microsoft security platform components, including Defender for Office 365, Defender for Identity, Defender for Cloud Apps, Defender for Cloud, and Intune.
Hands-on SIEM/XDR delivery and operations experience, particularly with Microsoft Sentinel and Microsoft Defender XDR.
Knowledge of identity and endpoint security fundamentals, such as Entra ID, Identity Protection, and Defender for Endpoint.
Kusto Query Language (KQL) skills for detection, investigation, and reporting; SPL is a plus.
Experience with vulnerability management tooling and processes, such as Qualys, and remediation strategy development.
Experience with security awareness training platforms and programs, such as KnowBe4, including campaign administration, phishing simulations, reporting, and remediation follow-up.
Scripting or automation experience using PowerShell, Python, and/or Azure CLI.
Outstanding written, verbal, technical, non-technical, communication, and presentation skills.
Ability to work independently, prioritize, manage concurrent tasks, and maintain high-quality work amid shifting priorities.
Proven collaboration skills and experience mentoring and guiding a highly technical team.
Commitment to ongoing learning, professional certifications, and industry knowledge.
Ability to lead client conversations to advance security strategy and program improvement.
Exceptional analytical skills and ability to communicate clearly in English with technical and non-technical stakeholders.
Ability to produce and review reports, develop clear remediation recommendations, and document and explain technical details concisely.
Ability to interface successfully with internal and external clients and manage personal schedules and project tasks.
Ability to provide weekly time accounting and monthly expense reports.
Willingness to travel as required for client onsite kickoffs, workshops, and escalations, primarily in Upstate New York with occasional out-of-state travel.
BS or MS in Computer Science or Engineering, or significant demonstrable experience in Microsoft Cloud Security.
Microsoft AZ-900, SC-300, and AZ-500 certifications; if not held at hire, they must be attained within six months after hire.
Ongoing training and professional certifications are job requirements.

Nice To Haves

Microsoft Purview experience, including IRM, DLP, Insider Risk, and governance concepts.
SOAR and automation concepts and process design.
Managed Detection and Response (MDR) experience and detection engineering in a managed services model.
CrowdStrike Endpoint, Identity, or XDR experience.
Cloud security exposure beyond Microsoft, including AWS or GCP and related security services.
Experience with Azure DevOps and process-driven delivery.
Familiarity with Microsoft Foundry, Microsoft 365 Copilot, and Microsoft Security Copilot.
ISC2 CISSP certification.
Microsoft SC-200 certification.
Certifications such as CEH, CCSP, or CISM.

Responsibilities

Lead security strategy development and roadmap planning aligned with client business priorities.
Produce and deliver executive security reporting covering risk, trends, outcomes, and next steps.
Provide security assessments, vulnerability management guidance, and awareness program support.
Lead consultative engagements, including requirements gathering, security workshops, assessments, and proofs-of-concept.
Advise clients and internal teams on security challenges and objectives, and support solution adoption and client satisfaction.
Identify obstacles and potential issues in security solution delivery and proactively address them with management.
Lead project execution and problem-solving to support successful delivery and client satisfaction.
Develop and implement best practices and methodologies for cybersecurity solution delivery.
Own solution implementation and program onboarding, including documentation, handoffs, and acceptance criteria.
Implement and manage SIEM/XDR architecture, including configuration, tuning, and workflows.
Maintain security solution health and integrations, including connectors, data sources, agents, and alert fidelity.
Manage accounts, permissions, and governance for security solutions.
Provide technical guidance and escalation support to Security Specialists.
Lead incident and service-issue triage, stakeholder communication, corrective-action tracking, and resolution.
Support presales meetings, proof-of-value/proof-of-concept work, and security program cost and scope modeling.
Deliver vendor and ProArch workshops and contribute to presentations, webinars, and approved marketing initiatives.
Research and evaluate emerging technologies and contribute to solution design and service evolution.
Deliver services using ProArch standard playbooks, templates, quality gates, and reporting packs.
Improve programs through appropriate automation and security engineering to increase repeatability and reduce manual effort.
Mentor and guide a highly technical team and collaborate with clients and internal teams.
Produce and review reports and provide clear remediation recommendations based on industry best practice.
Document and explain technical details clearly and concisely.
Manage personal schedule and project tasks, provide weekly time accounting, and submit monthly expense reports.
Travel as required for client onsite kickoffs, workshops, and escalations.
Complete ongoing training and maintain professional certifications.