Security Consultant

About ProArch

At ProArch, we partner with businesses around the world to turn big ideas into better outcomes through IT services that span cybersecurity, cloud, data, AI, and app development. We're 400+ team members strong across 3 countries—here's what connects us all: A love for solving real business problems and a belief in doing what's right.

Job Description

A Security Consultant is a client-focused role responsible for leading and supporting ProArch customers in building, operating, and continuously improving a comprehensive security program. This position blends security advisory, service delivery, and operational oversight, using ProArch standard playbooks, tooling, and reporting to reduce risk and improve security outcomes.

• Led security strategy development and roadmap planning aligned to business priorities
• Produce and deliver executive security reporting (risk, trends, outcomes, and next steps)
• Provide security assessments, vulnerability management guidance, and awareness program support as part of managed services and professional services engagements
• Own solution implementation and program onboarding, including documentation, handoffs, and acceptance criteria
• Implement and manage SIEM/XDR architecture (e.g., Microsoft Sentinel and Microsoft Defender XDR) including configuration, tuning, and workflows
• Maintain solution health and integrations (connectors, data sources, agents, and alert fidelity)
• Perform account/permission management and governance for security solutions
• Provide guidance and escalation support for Security Specialists; coordinate incident and service issue escalations to resolution
• Pre-sales & Practice Contribution: Support presales meetings, proof-of-value/proof-of-concept efforts, and security program cost & scope modeling; Deliver vendor and ProArch workshops; contribute to presentations, webinars, and approved marketing initiatives; Research and evaluate emerging technologies; contribute to solution design and service evolution
• Standardization & Continuous Improvement: Deliver services using ProArch standard playbooks, templates, quality gates, and reporting packs; Improve programs through automation and security engineering (where appropriate) to increase repeatability and reduce manual effort
• Technical Skills: Candidate should have a minimum of 4 years of experience in cybersecurity with additional background in security consulting or managed security services. Hands-on capability in core security platforms, the ability to translate technical findings into business risk, and strong client communication are required.
• Required (hands-on) SIEM/XDR delivery and operations, particularly Microsoft Sentinel and Microsoft Defender XDR
• Kusto Query Language (KQL) for detection, investigation, and reporting (SPL is a plus)
• SOAR and automation concepts and process design
• Identity and endpoint security fundamentals (e.g., Entra ID, Identity Protection, Defender for Endpoint)
• Strong client-facing communication: security report analysis, remediation recommendations, and executive-ready storytelling
• Working knowledge Microsoft security platform components (Defender for Office 365, Defender for Identity, Defender for Cloud Apps, Defender for Cloud, Intune, Entra ID)
• Managed Detection and Response (MDR) experience in a managed services model
• Vulnerability management tooling and process (e.g., Qualys) and remediation strategy development
• Scripting/automation using PowerShell, Python, and/or Azure CLI
• PREFERRED: Microsoft Purview (IRM, DLP, Insider Risk) and governance concepts
• CrowdStrike Endpoint/Identity/XDR experience
• Cloud security exposure beyond Microsoft (AWS/GCP) and related security services
• Experience with Azure DevOps and process-driven delivery
• Microsoft Foundry, Microsoft 365 Copilot, and Microsoft Security Copilot familiarity

Requirements

• This position requires that the applicant be a professional leader. ProArch is looking for a candidate who can fulfill the following:
• Outstanding Written, Verbal, Technical, Non-Technical, communication & presentation skills
• Self-directed with the ability to prioritize and handle multiple tasks concurrently, and of high quality
• Proven collaborator
• Experience in mentoring and guiding a highly technical team
• Eager learner continually improving skill sets, earning certifications, and gaining industry knowledge
• Skilled in leading a conversation with client to drive security strategy and program improvement
• Exceptional analytical skills
• A well understood English dialect is a must
• Ability to prioritize effectively and handle shifting priorities professionally
• Create clearly stated remediation recommendations based on industry best practice
• Successfully interface with clients, both internally and externally
• Document and explain technical details in concise and clear manner
• Manage personal schedule and project tasks
• Provide weekly time accounting and monthly expense reports
• Travel within upstate NY and occasionally out of state, as required

Education and Certification

• BS or MS in Computer Science / Engineering or significant demonstratable experience in Microsoft Cloud Security
• MUST HAVE: Microsoft: AZ-900, Microsoft: SC-300, Microsoft: AZ-500, ISC: CISSP
• PREFERRED: ISC2 CISSP; Microsoft SC-200; and/or certifications such as CEH, CCSP, CISM