Security Delivery Consultant

Job description

Join the employer Security to help organizations strengthen detection, investigation, and response to advanced cyber threats. As a senior cybersecurity practitioner you will deliver and enhance SOC capabilities across Incident Response, SIEM, Endpoint Detection and Response (EDR), and Network Detection and Response (NDR). Combine hands‑on technical expertise with leadership and stakeholder management, guiding security teams through complex investigations, improving detection, and maturing cyber defense processes and technologies. Responsibilities include developing and maintaining incident response plans, SOC policies, processes, and playbooks; leading detection, investigation, containment, and response; analyzing security events and advising analysts; improving SOC processes; providing technical leadership during incidents; collaborating on SIEM rule development; administering and optimizing EDR and NDR solutions; producing actionable intelligence and reports; and communicating technical matters to diverse stakeholders.

Requirements

• Strong experience in Security Operations and Incident Response
• experience developing or maintaining Incident Response plans and SOC policies, procedures and processes
• strong hands‑on experience with SIEM technologies
• experience developing, tuning or refining security correlation and detection rules
• hands‑on expertise administering EDR and NDR technologies
• experience deploying and maintaining endpoint security agents across Windows, macOS and Linux
• experience integrating EDR/NDR platforms with SIEM and other security technologies
• strong knowledge of security‑event analysis, investigation, detection and response
• strong analytical, troubleshooting and organizational capabilities
• ability to technically lead teams and guide complex cybersecurity investigations
• excellent verbal and written communication skills for technical and non‑technical stakeholders
• strong documentation and security‑reporting capabilities
• ability to participate in on‑call or after‑hours support
• GIAC Certified Incident Handler (GCIH) or equivalent
• GIAC Continuous Monitoring (GMON) or equivalent
• GIAC Certified Forensic Analyst (GCFA) or equivalent
• recognized industry certifications in cybersecurity, SOC, digital forensics or Incident Response
• experience in large‑scale enterprise Security Operations Centers
• exposure to threat hunting, cyber threat intelligence and detection engineering
• experience supporting complex or managed cybersecurity environments.

Skills