Senior Information Technology Security Consultant

The Senior Information Security Engineer owns, administers, and continuously improves core enterprise security platforms. This P4-I role requires senior-level independent judgment, deeper technical ownership, and strong delivery accountability, with expectations to lead complex platform activities, improve operational maturity, and provide senior-level support across email security, web security, network security, endpoint detection and response (EDR), data loss prevention (DLP), vulnerability management, and security automation.

The role is suited for an ownership-driven engineer who can operate independently, mentor junior engineers, partner with SOC and infrastructure teams, and help maintain a resilient enterprise security posture.

Key Responsibilities

Security Platform Ownership: Own administration, health, configuration, lifecycle support, upgrades, tuning, and operational readiness for assigned security platforms.

Email & Web Security: Administer and optimize secure email gateways, web filtering, and web reputation controls to reduce phishing, spam, malware, and risky web access exposure.

Network & Endpoint Security: Maintain network security controls and EDR/XDR coverage across Windows and Linux environments, including agent health, policy tuning, troubleshooting, and escalations.

Data Loss Prevention (DLP): Lead DLP policy validation, tuning, exception review support, and control effectiveness checks to protect confidential corporate and customer data.

Vulnerability Management: Perform scanning, analyze results using tools such as Tenable, Cortex, Qualys, or similar platforms, and provide prioritized remediation guidance.

Security Automation & Scripting: Develop and maintain automation using Python, PowerShell, Bash, APIs, or SOAR workflows to reduce manual effort and improve repeatability.

Incident Investigation & Escalation: Provide senior technical support for alert triage, telemetry validation, containment scoping, and investigation across host, network, proxy, firewall, email, and cloud security layers.

Governance & Documentation: Maintain operating procedures, engineering standards, implementation plans, knowledge articles, and runbooks aligned to change management expectations.

Mentorship & Collaboration: Guide junior engineers, review technical outputs, share platform knowledge, and collaborate with SOC, infrastructure, endpoint, network, application, and vendor teams.

Required Qualifications

8-13 years of hands-on experience in Security operations, Information security, SOC, Security engineering, or a closely related technical function.

Strong working knowledge of TCP/IP, routing, switching, firewalls, proxies, IDS/IPS, DNS, VPN, and segmentation concepts.

Practical experience in at least three domains: email security, network security, EDR/XDR or endpoint protection, DLP, vulnerability management, web security, SIEM/SOC tooling, or security automation.

Ability to independently troubleshoot complex security platform issues, perform root-cause analysis, and coordinate remediation across technical teams.

Hands-on experience with enterprise EDR/XDR or endpoint protection platforms such as CrowdStrike Falcon, Microsoft Defender, Cortex XDR, or similar tools.

Experience with vulnerability platforms such as Tenable.io/sc, Qualys, Rapid7, Cortex, or similar tools, including scan interpretation and remediation guidance.

Intermediate scripting or automation capability using Python, PowerShell, Bash, REST APIs, or comparable automation methods.

Ability to interpret and correlate logs from endpoints, proxies, firewalls, mail gateways, DLP tools, vulnerability platforms, and other enterprise security technologies.

Strong communication skills with the ability to explain technical risks, dependencies, and recommended actions to technical and non-technical stakeholders.

High ownership mindset with the ability to manage priorities, escalations, change control, and outcomes with limited supervision.

Preferred Qualifications / Certifications

Microsoft SC-200, CompTIA Security+, CEH, CISSP, CySA+, or equivalent security operations certification.

Vendor certifications from Palo Alto, CrowdStrike, Fortinet, Cisco, Microsoft, Tenable, Qualys, or equivalent enterprise security platforms.

Experience supporting global security operations, managed security services, or large enterprise security environments.

Exposure to SOAR, SIEM, XDR, cloud security, or AI-assisted security operations workflows.

Experience mentoring junior engineers, contributing to technical standards, or leading platform improvement initiatives.

Timings: EST timings with flexible work hours to cover US hours, stakeholder meetings, critical support, scheduled implementations, upgrades, and planned maintenance activities as needed.