Senior Cybersecurity Consultant

Schneider Downs•Columbus, OH

18h•Hybrid

About The Position

Schneider Downs is seeking a Senior Cybersecurity Consultant to advise clients on cybersecurity strategy and the tactical implementation of controls. The consultant will work across a broad range of cybersecurity disciplines, identify issues and opportunities within client environments, and help advance the capabilities of the firm’s cybersecurity practice. The role also supports incident response and digital forensics, engages with senior client leadership, develops junior team members, and leads organizational initiatives. The position uses a hybrid work model, combining work from home and in-office work.

Requirements

Bachelor’s degree in Computer Science, Cybersecurity, Digital Forensics, Electrical Engineering, Information Assurance, Information Systems, Information Technology, Management Information Systems, or a related field.
At least three years of cybersecurity experience, including a comprehensive understanding of cybersecurity frameworks.
Prior cybersecurity consulting experience.
Understanding of leading cybersecurity frameworks, such as NIST 2.0 and CIS IG3.
Understanding of legal, regulatory, and compliance requirements, such as GDPR, PCI, HIPAA, and SOX.
Experience with advanced computer exploitation methodologies.
Understanding of TCP/IP network communication protocols and their analysis.
Practical working knowledge of the incident response lifecycle, including detection, identification, containment, analysis, remediation, and reporting.
Ability to integrate data from multiple sources and present concise, relevant information to non-technical audiences.
Strong communication and presentation skills and the ability to work collaboratively.

Nice To Haves

Related certifications, such as CISSP, GCIH, GCFE, GCFA, GREM, GNFA, A+, Network+, and/or Security+.

Responsibilities

Support large-scale technical and non-technical client assessment projects.
Provide vCISO-like consulting to help clients drive year-over-year change.
Develop custom reports using data from security appliances, network sensors, external intelligence feeds, audit data, and other sources.
Present technical material clearly to technical and non-technical audiences, including boards of directors.
Scope and present findings for a broad range of incidents, from nation-state APT activity to financially motivated cybercrime.
Maintain current knowledge of public toolsets and tactics, techniques, and procedures used by advanced persistent threats.
Advise on best-practice configurations for cybersecurity architecture elements such as EDR, XDR, SIEM, email filters, URL inspection, microsegmentation, and PAM solutions.
Perform tabletop exercises.
Evaluate and improve incident response plans.
Perform Purple Team exercises to evaluate alerting and detection.
Evaluate hardening configurations across hardware and operating system types.
Assess the security and configuration of Active Directory and Group Policy Objects.
Evaluate AWS, G-Suite, and Office 365 configurations against best practices.
Develop detailed reports on root cause analysis and recommendations related to computer incidents.
Collaborate with local and remote team members and help keep engagement work on task and on schedule.
Develop junior team members and lead organizational initiatives.

Benefits

Competitive compensation.
Health, dental, and vision insurance beginning on day one.
Paid time off and paid holidays.
Parental leave, family care leave, and volunteer time.
401(k) plans and profit sharing.
CPA exam bonus.
Education assistance program.
Pet insurance.
Hybrid work flexibility.
One-on-one coaching and mentoring and learning opportunities for professional development.