Cybersecurity Risk & Threat Modeling Advisor

Echelon Cyber; Northern (KY); Hybrid; USD 90,000 - 150,000; Full time

Job summary

Echelon Risk + Cyber, a leading cybersecurity consulting firm, seeks a Cybersecurity Risk & Technical Advisory Consultant to identify opportunities for clients and internal improvements. You will perform cloud and Microsoft 365 security assessments, threat modeling, threat hunting, purple team exercises, and incident response advisory.

The role emphasizes entrepreneurial problem solving and client collaboration.

Qualifications

• Experience delivering Technology Risk, Compliance, and Cybersecurity engagements.
• Proficiency in cloud security assessments across AWS, Azure, and GCP.
• Ability to map adversary behavior using MITRE ATT&CK.
• Experience in incident response playbooks and post-incident remediation.
• Strong written and verbal communication for client reports.

Responsibilities

• Assist in execution, development, and reporting of Technology Risk, Compliance, and Cybersecurity engagements.
• Conduct security assessments across cloud environments, Microsoft 365, network infrastructure, endpoints, and SOC operations.
• Perform threat modeling and threat hunting to surface gaps in detection.
• Support purple team exercises and tabletop simulations with client teams.
• Develop incident response playbooks and remediation roadmaps.
• Create client reports and present results to stakeholders.
• Stay up to date with industry trends and regulations.
• Collaborate with team to address client risks and deliver solutions.

Skills

Cloud security

Threat modeling

Threat hunting

MITRE ATT&CK

Purple team

Incident response

Detection engineering

BC/DR planning

BIA

Client-facing communication

Tools

AWS

Azure

GCP

Microsoft 365

Job description

Echelon Risk + Cyber, a leading cybersecurity consulting firm, seeks a Cybersecurity Risk & Technical Advisory Consultant to identify opportunities for clients and internal improvements. You will perform cloud and Microsoft 365 security assessments, threat modeling, threat hunting, purple team exercises, and incident response advisory.

The role emphasizes entrepreneurial problem solving and client collaboration.