Senior Security Consultant (ID: mTLWeidf)

This is a new role in our security team and the Senior Cyber Security Consultant will play a key role in the delivery of our Security Managed Service and Professional Services functions, acting as the subject matter expert and helping evolve and develop DA’s offerings and our service capability.

This is a technically hands-on role, focused on the continued success of our security function. As such, you will provide the day-to-day technical expertise and guidance on security operations activities, such as vulnerability management, major incident response, and security monitoring improvements.

You will provide insights and guidance to our customers as a security lead and therefore, will be expected to demonstrate significant technical expertise in the audit, assessments, design, implementation, testing, compliance, reporting, support, and handover of security projects.

This role will best suit a senior security professional, with experience of engaging with customers at various technical levels. You will bring a versatile approach, demonstrate a good commercial understanding, and provide the hands-on technical capability to own our security engagements.

About Us:

DA have delivered IT solutions for over 30 years to world-renowned, international clients. Our customers operate mainly in the professional and financial services sector, including leading private equity and venture capital firms and top 10 UK law firms.

We are a Microsoft Solutions Partner with four designations, hold a Tier 1 Microsoft CSP relationship and are ISO27001 & ISO9001 accredited. We work to the NIST Cyber Security Framework, and our solutions typically build upon the Microsoft security stack.

Our customers value our consultative, holistic, and risk-based approach to security, and have built a reputation as a company that keeps its promises and delivers quality.

Responsibilities:

Execution of security services

• Contribute to the evolution and growth of the Managed Security Service. Recommend solutions to address the constantly changing threat landscape.
• Keep up to date with developments in the security field, especially significant new threats, and emerging technologies.
• Contribute to the blogs, slide decks and security briefings.
• Deliver the technical and advisory aspects of Managed Security Services across the customer base.
• Understand and consult with customers (and internal colleagues) on governance and compliance matters.
• Active contribution to our relationships with security vendors, ensuring DA continues to leverage the best product stack efficiently.
• Gather and understand requirements for security projects.

Technical leadership of the security function:

• Represent the security function (including the 24/7 Incident Response capability) within the business.
• Act as the escalation point for the security function, providing technical leadership in how security consultants deliver managed security services.
• Be the subject matter expert in Microsoft security with a depth of experience across the Defender stack.
• Undertake the role of the Business Security Officer for Doherty Associates, working with the CFO on delivering the elements of a robust ISMS which includes our ISO27001 certification.
• Ensure effective cross-functional collaboration.

Project delivery and customer engagement:

• Lead customer engagement as the trusted security advisor.
• Perform ad-hoc onsite consultancy as and when required.
• Perform requirements analysis following customer engagements.
• Design, architect, and deliver security projects.
• Document and transition projects into support.
• Assist in resolving issues post-implementation.
• Be the escalation point for complex security issues that can’t be resolved by junior engineers.
• Complete project time reporting requirements in a timely manner.

Qualifications, skills and experience:

• Industry certification such as: CISSP, CISA, CYSA+, Security+, CISM, CEH, Microsoft Security (SC-200, AZ-500, MS-500).
• Previous experience of working in roles such as Cyber Security Consultant consulting to external clients.
• Background of working in roles such as Security Operations, Network Engineering, Software Development, or Infrastructure Support Engineer.
• Experience in overseeing and leading remediation of security assessments, technical testing, and vulnerability analysis including Cyber Essentials, Cyber Essentials Plus, and NIST CSF.
• Hands-on experience in delivering security projects, including implementation and post-implementation support, providing guidance and support to customers throughout.
• Evidence of successful technical leadership, acting as a role model, and mentoring junior team members.
• Technical knowledge and broad hands-on experience of working with security technologies such as the Microsoft XDR stack, vulnerability management tools, SIEMs including Sentinel.
• Experience in incident response and overseeing operational improvement actions such as development and tuning of security monitoring, alerting, and reporting.
• Strong communication skills, both verbal and written.
• Fluent English.

About You:

• Professional with gravitas (influential and senior level).
• Accountability – a sense of ownership and commitment.
• Empathy – ability to listen to understand, support, and acknowledge challenges colleagues may be facing.
• Adaptability – ability to apply a flexible approach that allows you to pivot as necessary. Able to overcome unexpected challenges rather than resisting them. Able to respond to a fast-changing economic and technical environment.
• Focus – ability to maintain the big picture view
• Positivity – the ability to encourage and motivate those around you to achieve goals, do their best and exceed expectations.
• ?Stability – Able to take a steady, reliable approach to managing deliverables. Maintain energy and focus. Strive for constant progress.

What we offer in return:

• Basic salary plus performance bonus
• 34 days of annual leave (incl. 8 UK bank holidays and a day off on your birthday)
• We are passionate about our success being driven by ‘better together’ and offer hybrid working with subsidised home-to-office travel costs
• Enhanced family-friendly benefit schemes including company sick pay
• Sponsored training and development and where applicable to the role, a technical exams incentive scheme
• Private medical insurance and Employee Assistance Programme
• Income protection and life insurance

Job Type: Full-time, Permanent

Pay: £80,000.00-£85,000.00 per year

Additional pay:

• Performance bonus

Schedule:

• Monday to Friday

Work Location: Hybrid remote in London