Principal Security Consultant

Role Overview

• The Principal Consultant, acting as a technical advisor, is tasked with developing, mentoring, and training the Professional Services team, including overseeing their onboarding and maintaining up to date expertise on service offerings.
• This role supports Delivery Management and Resource Management in achieving delivery Theatre objectives and revenue targets, while also handling client escalations by liaising between the delivery team and other Tenable functions.
• Additionally, the Principal Consultant focuses on advancing Tenable Subk partners through training and certification onboarding and seeks opportunities to enhance the Professional Services structure through training tutorials and the creation of new methodologies.
• This role also includes some client billable work, shared with the responsibilities outlined.

Requirements

• 12+ years of experience in the Information Technology/Cyber Security field and professional services experience.
• Bachelor’s degree in a related technical field such as Information Technology, Computer Science, or equivalent work experience.
• Outstanding written and verbal communication skills. Must be comfortable leading 3+ hour calls and keeping up the progression of tasks on the call while assuring that all relevant topics are addressed.
• Strong analytical skills and troubleshooting skills, with the ability to diagnose and resolve complex security issues.
• Expert level ability to diagnose, resolve and anticipate complex security issues and risks with ability to lead resolution across various client environments.
• Proficiency in assessing and identifying threats and risks related to Exposure Management, including vulnerabilities and weaknesses in host or network configurations.
• Recent in-depth experience performing vulnerability scans, configuration audits, and security monitoring with core Tenable products, or other industry solutions.
• Familiarity with Red Teaming, penetration assessments, and security testing tools such Metasploit and Burp Suite.
• Experience with application security testing, OWASP and common exploitable web application threats in the context of Exposure Management.
• Deep understanding of Auditing and Configuration frameworks such as ISO 17799, CIS, PCI, GLBA and HIPAA preferred.
• Broad understanding and experience of cyber security principles including vulnerability management, defense in-depth, least-privilege, data protection, regulation and common security controls.
• Proven experience managing client expectations, building relationships and delivering consultative advice to ensure successful outcomes.
• Proven consulting abilities with a focus on assessing and advising customers with their Exposure Management strategy.
• Experience of designing and implementing security solutions and platforms.
• Deep understanding of networking, virtualization, Linux/Unix and Windows administration, patch deployment and system configuration. While this is not a purely technical role, having a technical foundation will be necessary for long-term success.
• Understanding of wireless LAN protocols and various WLAN vulnerabilities and attacks.
• Understanding of common control systems such as firewalls, blacklists, ACLs, and common network monitoring tools such as IDS/IPS.
• Deep understanding of Patch Management, IPAM, ITSM, CMDB, and SIEM solutions as they relate to Exposure Management.
• Experience of using programming and scripting tools such as Python or Powershell for automation and API driven tasks.
• Experience of cloud services, common cloud infrastructure, CSPM, CIEM, IaC, containerization, and all the potential risks associated with cloud-based and hybrid environments.
• Experience of Microsoft Active Directory environments, including common risks, threats and security.
• Familiarity with SCADA and OT systems is a plus for managing exposure in these environments.
• Current security certifications such as CISSP, CISA, CISM, OSCP or equivalent experience.
• This position is US-based only (US NorthEast area preferably).

Tech Stack

• Cloud
• Cyber Security
• Firewalls
• ITSM
• Linux
• Python
• Unix

Benefits

• medical, dental, vision, disability and life insurance
• 401(k) retirement savings with company match
• an employee stock purchase plan
• an employee referral program
• flexible spending accounts
• an Employee Assistance Program (EAP)
• education assistance
• parental leave
• paid time off (PTO)
• company-paid holidays
• health and wellness events
• community programs