Security Consultant (Microsoft Stack)

The Security Consultant is the primary client-facing owner for assigned security programs and managed security engagements. This role leads security strategy, establishes delivery priorities and technical standards, directs onboarding and service improvement, and owns executive communication, risk recommendations, and escalation outcomes. The consultant remains hands-on with ProArch security platforms while providing technical direction, work prioritization, and escalation support to Security Specialists, who perform day-to-day monitoring, investigation, and operational tasks under established playbooks. Working across client stakeholders and ProArch delivery teams, the Security Consultant is accountable for service quality, solution health, measurable risk reduction, and continuous program improvement. Ongoing training and professional certifications are required.

JOB RESPONSIBILITIES

• Client Advisory & Guidance

• o Lead security strategy development and roadmap planning aligned to business priorities.

• o Produce and deliver executive security reporting (risk, trends, outcomes, and next steps).

• o Provide security assessments, vulnerability management guidance, and awareness program support as part of managed services and professional services engagements.

• Consulting, Advising, & Client Engagement:

• o Act as a trusted adviser to clients and internal teams, offering strategic guidance to address specific security challenges and objectives.

• o Lead consultative engagements, including requirements gathering, security workshops, assessments, and proofs-of-concept.

• o Work closely with clients to enhance solution adoption, ensuring solutions align with their needs and maximizing client satisfaction.

• Overcoming Obstacles & Driving Successful Delivery:

• o Identify obstacles and potential issues in security solution delivery, proactively addressing these challenges with management.

• o Ensure smooth project execution and client satisfaction through effective leadership and problem-solving.

• o Develop and implement best practices and methodologies to ensure the successful delivery of cybersecurity solutions.

• Service Delivery & Operational Oversight

• o Own solution implementation and program onboarding, including documentation, handoffs, and acceptance criteria.

• o Implement and manage SIEM/XDR architecture (e.g., Microsoft Sentinel and Microsoft Defender XDR) including configuration, tuning, and workflows.

• o Maintain solution health and integrations (connectors, data sources, agents, and alert fidelity).

• o Perform account/permission management and governance for security solutions.

• o Provide technical guidance and escalation support for Security Specialists; lead triage, stakeholder communication, corrective-action tracking, and resolution of security incidents and service issues.

• Practice Contribution

• o Support presales meetings, proof-of-value/proof-of-concept efforts, and security program cost & scope modeling.

• o Deliver vendor and ProArch workshops; contribute to presentations, webinars, and approved marketing initiatives.

• o Research and evaluate emerging technologies; contribute to solution design and service evolution.

• o Deliver services using ProArch standard playbooks, templates, quality gates, and reporting packs.

• o Improve programs through automation and security engineering (where appropriate) to increase repeatability and reduce manual effort.

Requirements

TECHNICAL SKILLS

Candidate should have a minimum of 4 years of experience in cybersecurity with additional background in security consulting or managed security services. To be successful, this position requires hands-on capability in core security platforms, the ability to translate technical findings into business risk, and strong client communication.

• Required (hands-on)

o Microsoft security platform components (Defender for Office 365, Defender for Identity, Defender for Cloud Apps, Defender for Cloud, Intune).

o SIEM/XDR delivery and operations, particularly Microsoft Sentinel and Microsoft Defender XDR.

o Identity and endpoint security fundamentals (e.g., Entra ID, Identity Protection, Defender for Endpoint).

o Kusto Query Language (KQL) for detection, investigation, and reporting (SPL is a plus).

o Vulnerability management tooling and process (e.g., Qualys) and remediation strategy development.

o Security awareness training platforms and programs (e.g., KnowBe4), including campaign administration, phishing simulations, reporting, and remediation follow-up.

o Scripting/automation using PowerShell, Python, and/or Azure CLI.

• Preferred

o Microsoft Purview (IRM, DLP, Insider Risk) and governance concepts.

o SOAR and automation concepts and process design.

o Managed Detection and Response (MDR) experience and detection engineering in a managed services model.

o CrowdStrike Endpoint/Identity/XDR experience.

o Cloud security exposure beyond Microsoft (AWS/GCP) and related security services.

o Experience with Azure DevOps and process-driven delivery.

o Microsoft Foundry, Microsoft 365 Copilot, and Microsoft Security Copilot familiarity.

REQUIREMENTS

This position requires that the applicant be a professional leader. ProArch is looking for a candidate who can fulfill the following:

• Outstanding Written, Verbal, Technical, Non-Technical, communication & presentation skills.
• Self-directed with the ability to prioritize and handle multiple tasks concurrently, and of high quality.
• Proven collaborator. Experience in mentoring and guiding a highly technical team.
• Eager learner continually improving skill sets, earning certifications, and gaining industry knowledge.
• Skilled in leading a conversation with client to drive security strategy and program improvement.
• Exceptional analytical skills.
• Ability to communicate clearly in English (written and spoken) with both technical and non-technical stakeholders.
• Ability to prioritize effectively and handle shifting priorities professionally.
• Produce and review reports to support project deliverables.
• Ongoing training and professional certifications are part of the job requirements.
• Create clearly stated remediation recommendations based on industry best practice.
• Successfully interface with clients, both internally and externally.
• Document and explain technical details in concise and clear manner.
• Manage personal schedule and project tasks.
• Provide weekly time accounting and monthly expense reports.
• Travel as required for client onsite kickoffs, workshops, and escalations (primarily Upstate NY; occasional out-of-state).

EDUCATION AND CERTIFICATION

• BS or MS in Computer Science / Engineering or significant demonstratable experience in Microsoft Cloud Security.
• Must have the following certifications. If not held at time of hire, must be attained within 6 months after hire:

o Microsoft: AZ-900

o Microsoft: SC-300

o Microsoft: AZ-500

• Preferred certifications: ISC2 CISSP; Microsoft SC-200; and/or certifications such as CEH, CCSP, CISM