Consultant, Cybersecurity consultant

RSA delivers mission-driven security solutions that give organizations a unified approach to managing digital risk — built on integrated visibility, automated insight, and coordinated action. Anchored by our storied Identity and Access Management platform, RSA protects millions of users worldwide and supports more than 90 percent of the Fortune 500 and every branch of the U.S. federal government.

AsaSeniorAdvisoron the Security & Risk team,you are charged withhelping protect a company that secures the most secure. You will safeguard both our production corporate environments and the product and R&D space, helping security act as an enabler of the business rather than abrakeonit.

Principal Responsibilities:

• Serve assecond levelIncident Responseinteracting with ourthird partySOCandbe a securitySMEona shared on-call rotation.

• Operate and tune core detection and response tooling —such asSIEM, SOAR, XDR/EDR, WAF, and NGFW — to sharpen signal and cut noise.

• Apply identity-centric and Zero Trust controls — access, MFA, and least privilege — alongside theITplatform and product teams.

• Support security as an enabler in the product and R&D lifecycle, advising engineering on secure-by-design patterns.

• Be an advocate and enabler for maturingthe securitycontrols around data, AIservicesandour products

• Maintain clear documentation, runbooks,developmetrics, and present findings to both technical and non-technical audiences.

• Deep-diveinto security systems as needed to investigateissues, andautomate recurring tasks through scriptingor AI Agents as appropriate.

• Act as the bridge between technical and non-technical contributors

• Act as a senior member of the team, mentoring team members, able to actindependently with some management guidance – regularlyinteracting with other technical and non-technical teams across the business

Essential Requirements:

• 6-10years of related cybersecurity operations experience with aBachelor’sdegree; or4or moreyears with aMaster’sdegree.

• Hands-on production operation of security technologies in public cloud (Azure and/or AWS) and on-premises environments — including vulnerability scanning and management, SIEM/logging, WAF, network segmentation and security groups, system hardening/STIG, malware prevention, and incident response.

• Firm grasp of identity and access management and Zero Trust principles — authentication and authorization standards (MFA, SAML, OAuth, OIDC), directory services, and least-privilege access — reflecting identity’s role as the modern control point.

• Strongknowledge of networking concepts and of both Linux and Windows host operating systems.

• Critical-thinking drive — asking what could be, how it could be done better, and pursuing continuous improvement and efficiency through automation — paired with a collaborative work style.

• Strong written, spoken, and presentation skills, with the ability to communicate security decisions clearly and to translate between technical and non-technical audiences.

• US Citizen / US Soil

Desirable Outcomes:

• Experience securing customer-facing SaaS environments and familiarity with FedRAMP, SOC 2, NIST, or CSA compliance frameworks; prior workwithafederal, FedRAMP, or otherwise regulated environment is highly desirable.

• Experience securing product and R&D orDevSecOpsenvironments — container and Kubernetes security, infrastructure-as-code scanning, and secrets management.

• Familiarity with securing AI/ML workloads and AI-enabled tooling, and an awareness of emerging AI-driven threats and defensive use cases.

• Demonstrated group, team, or thought leadership within cloud or security operations initiatives.

• Experiencethreat huntingorred-teamingwithina complex enterprise environment