Senior Cybersecurity Consultant

Schneider Downs•Columbus, OH

4d•Hybrid

About The Position

As a Senior Cybersecurity Consultant at Schneider Downs, you will advise clients on cybersecurity strategy and the tactical implementation of controls, using expertise across a broad range of cybersecurity disciplines. You will investigate client environments, identify security problems and opportunities to improve the firm’s cybersecurity practice, support incident response and digital forensics offerings, engage with client senior leadership, develop junior team members, and lead organizational initiatives. The role involves work with systems described as being at the cutting edge of technology and scale. The position follows a hybrid work model, with flexibility to work from home and in the office. Schneider Downs describes its culture as supportive and centered on care and respect, integrity, excellence, adaptability, and teamwork.

Requirements

Bachelor’s degree in Computer Science, Cybersecurity, Digital Forensics, Electrical Engineering, Information Assurance, Information Systems, Information Technology, Management Information Systems, or a related field.
At least three years of cybersecurity experience, including a comprehensive understanding of cybersecurity frameworks.
Prior cybersecurity consulting experience.
Understanding of leading cybersecurity frameworks, such as NIST 2.0 and CIS IG3.
Understanding of legal, regulatory, and compliance requirements, such as GDPR, PCI, HIPAA, and SOX.
Experience with advanced computer exploitation methodologies.
Understanding of TCP/IP network communication protocols and their analysis.
Practical working knowledge of the incident response lifecycle, including detection, identification, containment, analysis, remediation, and reporting.
Ability to integrate data from multiple sources and present concise, relevant information to non-technical audiences.
Strong communication and presentation skills and ability to work collaboratively.

Nice To Haves

Related certifications, such as CISSP, GCIH, GCFE, GCFA, GREM, GNFA, A+, Network+, and/or Security+.

Responsibilities

Support large-scale technical and non-technical client assessment projects.
Provide cybersecurity consulting from a vCISO-like perspective and help drive ongoing client change.
Develop custom reports using data from security appliances, network sensors, external intelligence feeds, and audit data.
Present technical material clearly to technical and non-technical audiences, including boards of directors.
Scope and present findings for a broad range of incidents, from nation-state APT activity to financially motivated cybercrime.
Maintain current knowledge of public toolsets and advanced persistent threat tactics, techniques, and procedures.
Advise on best-practice configurations for cybersecurity architecture elements, including EDR, XDR, SIEM, email filters, URL inspection, microsegmentation, and PAM solutions.
Perform tabletop exercises.
Evaluate and improve incident response plans.
Perform Purple Team exercises to evaluate alerting and detection.
Evaluate hardware and operating system hardening configurations.
Assess Active Directory and Group Policy Object security and configuration.
Evaluate AWS, G-Suite, and Office 365 configurations against best practices.
Develop detailed reports on computer incident root-cause analysis and recommendations.
Collaborate with local and remote team members and help keep engagements on task and on schedule.
Integrate data from multiple sources and present concise, relevant information to non-technical audiences.