Cyber Advisor, Post-Cyber Event Hardening

What you'll do

• Conduct targeted reviews of customer environments to identify and prioritize critical security control gaps.
• Deploy technical hardening measures including endpoint protection, email security tools, and network access controls.
• Implement zero-trust principles and robust identity protections to secure customer infrastructure.
• Translate complex technical improvements into strategic business value for clients following cyber events.
• Develop and update technical "betterment" playbooks and toolsets based on evolving threat tactics.
• Vet new security solutions to ensure the service utilizes effective and reliable technologies.
• Provide anonymized insights from engagements to help internal teams refine risk models and policy standards.
• Act as a subject matter expert to provide guidance on modern infrastructure hardening for internal teams.

What we're looking for

• Proven experience in security hardening, including the implementation and optimization of security controls across complex environments.
• Deep technical knowledge in deploying and configuring EDR/MDR, IAM, and Email Security solutions.
• Extensive experience implementing Multi-Factor Authentication (MFA) and Active Directory or Entra ID security improvements.
• Expertise in securing network architectures, including firewall remediation, VPN, ZTNA, SASE, and cloud environment hardening (Azure, AWS, or GCP).
• Ability to identify and categorize security control gaps while providing tailored recommendations and high-impact remediations.
• Experience collecting and analyzing data from various security tools to drive risk management decisions.
• Proven track record of translating emerging cyber threats into proactive defensive measures.
• Excellent communication skills to guide customers through technical remediation steps during high-stress periods.