Senior Security Consultant - L3

at  SoftwareONE

Job Function: Software & Cloud Services The role:

In this role, you will be responsible for delivering Microsoft security, compliance, identity, and management solutions and services. Your responsibilities will encompass a blend of both pre- and post-sales consulting, often juggling multiple projects simultaneously. You will collaborate with our clients to understand their security needs, assess their current systems, and provide expert guidance to enhance their security posture within the Microsoft ecosystem. This role requires a deep understanding of Microsoft security technologies, industry best practices, and the ability to effectively communicate complex security concepts to technical and non-technical stakeholders.

• Client Consultation: Act as an expert when engaging with clients to understand their business objectives, security requirements, and existing Microsoft environments.
• Security Assessment: Conduct comprehensive assessments of clients’ Microsoft environments, identifying vulnerabilities, gaps, and areas for improvement.
• Solution Design: Develop customized security solutions leveraging Microsoft technologies such as Azure AD, Azure Security Center, Microsoft Defender for Endpoint, Microsoft 365 Security, Azure Defender for Cloud, Purview, Azure Sentinel, etc., to address clients’ security challenges.
• Implementation: Lead the implementation of security solutions, including configuration, deployment, and integration with existing systems.
• Documentation and Reporting: Document design decisions, configurations, and procedures. Generate reports to communicate findings, recommendations, and security metrics to clients and internal stakeholders.
• Training and Knowledge Sharing: Conduct training sessions for clients and internal teams on Microsoft security technologies, best practices, and emerging threats.
• Security Operations: Provide ongoing support and management of security solutions, including monitoring, incident response, and proactive maintenance.
• Identifying and fixing vulnerabilities within existing security systems
• Collect data on current security measures for risk analysis, and write systems status reports regularly
• Monitor constantly for attacks and run appropriate defensive protocols if a breach occurs
• Conduct testing to identify vulnerabilities, and collaborate with cybersecurity team to update defensive protocols when necessary
• Configure antivirus systems, firewalls, data centers, and software updates with a security-first mindset
• Grant credentials to authorized users, monitor access-related activities, and check for unregistered information changes
• Help lead employee training to prevent phishing and other forms of cyberattack
• Document known security breaches and vulnerabilities

What we need to see from you:

• Technical Expertise: In-depth knowledge and hands-on experience of Microsoft security technologies, including Azure AD/Entra, Intune, Microsoft 365 Defender, Azure/Defender for Cloud, Purview, Sentinel, and on-premises Active Directory, etc…
• Experience: Proven experience designing, implementing, and managing security solutions within Microsoft environments. Experience working with clients in a consulting capacity is preferred.
• Problem-Solving Skills: Strong analytical and problem-solving skills with the ability to assess complex security challenges and develop practical, effective solutions.
• Communication Skills: Excellent communication skills with the ability to articulate complex security concepts to technical and non-technical audiences effectively.
• Team Collaboration: Ability to work collaboratively with cross-functional teams and stakeholders to achieve common security goals.
• Bachelor’s degree (or equivalent) in information systems, information technology, or related field. Advanced degrees or certifications are advantageous.
• Security Certifications: Relevant certifications such as Microsoft Certified: Security, Compliance, and Identity Fundamentals, Microsoft Certified: Security Operations Analyst Associate, Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), etc., are highly desirable.

Why SoftwareOne?:
Hear firsthand from SoftwareOne APAC leaders as they unveil our exciting business and growth plan, spill the beans on our hiring initiatives, and reveal why joining SoftwareOne is a game-changer. Join us now and be part of our incredible journey.

• Client Consultation: Act as an expert when engaging with clients to understand their business objectives, security requirements, and existing Microsoft environments.
• Security Assessment: Conduct comprehensive assessments of clients’ Microsoft environments, identifying vulnerabilities, gaps, and areas for improvement.
• Solution Design: Develop customized security solutions leveraging Microsoft technologies such as Azure AD, Azure Security Center, Microsoft Defender for Endpoint, Microsoft 365 Security, Azure Defender for Cloud, Purview, Azure Sentinel, etc., to address clients’ security challenges.
• Implementation: Lead the implementation of security solutions, including configuration, deployment, and integration with existing systems.
• Documentation and Reporting: Document design decisions, configurations, and procedures. Generate reports to communicate findings, recommendations, and security metrics to clients and internal stakeholders.
• Training and Knowledge Sharing: Conduct training sessions for clients and internal teams on Microsoft security technologies, best practices, and emerging threats.
• Security Operations: Provide ongoing support and management of security solutions, including monitoring, incident response, and proactive maintenance.
• Identifying and fixing vulnerabilities within existing security systems
• Collect data on current security measures for risk analysis, and write systems status reports regularly
• Monitor constantly for attacks and run appropriate defensive protocols if a breach occurs
• Conduct testing to identify vulnerabilities, and collaborate with cybersecurity team to update defensive protocols when necessary
• Configure antivirus systems, firewalls, data centers, and software updates with a security-first mindset
• Grant credentials to authorized users, monitor access-related activities, and check for unregistered information changes
• Help lead employee training to prevent phishing and other forms of cyberattack
• Document known security breaches and vulnerabilitie