Security Consultant (Microsoft Stack)

ProArch; Atlanta (GA); On-site; USD 120,000 - 180,000; Full time

Job summary

ProArch is seeking an experienced cybersecurity leader to drive client advisory services, security strategy, and program delivery. You will guide security roadmaps, oversee SIEM/XDR deployments (Microsoft Sentinel/Defender XDR), and mentor teams across managed services and consulting engagements.

The role requires hands-on expertise in Defender suites, vulnerability management, and scripting with strong client communication. Travel to client sites for workshops and on-site kickoffs is expected.

Qualifications

• BS or MS in Computer Science / Engineering or significant demonstrable experience in Microsoft Cloud Security.
• Must have Microsoft: AZ-900, SC-300, AZ-500; preferred CISSP/SC-200/CEH/CCSP/CISM.
• Hands-on in Defender suite, SIEM/XDR, identity and endpoint security, and scripting/automation.
• Experience with vulnerability management tooling (e.g., Qualys) and remediation strategy.
• Ability to translate technical findings to business risk and communicate to stakeholders.

Responsibilities

• Lead security strategy development and roadmap planning aligned to business priorities.
• Produce executive security reporting on risk, trends, outcomes, and next steps.
• Provide security assessments and guidance within managed and professional services engagements.
• Act as trusted adviser; lead consultative engagements, requirements, workshops, and proofs-of-concept.
• Oversee service delivery, onboarding, SIEM/XDR tooling configurations, and incident response.
• Support presales with security program cost modeling and workshops.
• Deliver services using standard playbooks, templates, and quality gates.

Skills

Microsoft Defender suite

SIEM/XDR delivery

Identity & endpoint security

Kusto Query Language (KQL)

Vulnerability management tooling

Security awareness training

Scripting/automation (PowerShell, PY,-

Microsoft Purview

SOAR & automation

MDR experience

CrowdStrike XDR

Cloud security (AWS/GCP)

Azure DevOps

Microsoft Foundry / Copilot

Education

BS or MS in Computer Science / Engineering

Microsoft AZ-900

Microsoft SC-300

Microsoft AZ-500

Preferred: CISSP; SC-200; CEH; CCSP; CISM

Tools

Qualys

Job description

JOB RESPONSIBILITIES

Client Advisory & Guidance

• o Lead security strategy development and roadmap planning aligned to business priorities.
• o Produce and deliver executive security reporting (risk, trends, outcomes, and next steps).
• o Provide security assessments, vulnerability management guidance, and awareness program support as part of managed services and professional services engagements.

Consulting, Advising, & Client Engagement:

• o Act as a trusted adviser to clients and internal teams, offering strategic guidance to address specific security challenges and objectives.
• o Lead consultative engagements, including requirements gathering, security workshops, assessments, and proofs-of-concept.
• o Work closely with clients to enhance solution adoption, ensuring solutions align with their needs and maximizing client satisfaction.

Overcoming Obstacles & Driving Successful Delivery:

• o Identify obstacles and potential issues in security solution delivery, proactively addressing these challenges with management.
• o Ensure smooth project execution and client satisfaction through effective leadership and problem-solving.
• o Develop and implement best practices and methodologies to ensure the successful delivery of cybersecurity solutions.

Service Delivery & Operational Oversight

• o Own solution implementation and program onboarding, including documentation, handoffs, and acceptance criteria.
• o Implement and manage SIEM/XDR architecture (e.g., Microsoft Sentinel and Microsoft Defender XDR) including configuration, tuning, and workflows.
• o Maintain solution health and integrations (connectors, data sources, agents, and alert fidelity).
• o Perform account/permission management and governance for security solutions.
• o Provide technical guidance and escalation support for Security Specialists; lead triage, stakeholder communication, corrective-action tracking, and resolution of security incidents and service issues.

Practice Contribution

• o Support presales meetings, proof-of-value/proof-of-concept efforts, and security program cost & scope modeling.
• o Deliver vendor and ProArch workshops; contribute to presentations, webinars, and approved marketing initiatives.
• o Research and evaluate emerging technologies; contribute to solution design and service evolution.
• o Deliver services using ProArch standard playbooks, templates, quality gates, and reporting packs.
• o Improve programs through automation and security engineering (where appropriate) to increase repeatability and reduce manual effort.

TECHNICAL SKILLS

Candidate should have a minimum of 4 years of experience in cybersecurity with additional background in security consulting or managed security services. To be successful, this position requires hands-on capability in core security platforms, the ability to translate technical findings into business risk, and strong client communication.

Required (hands-on)

• o Microsoft security platform components (Defender for Office 365, Defender for Identity, Defender for Cloud Apps, Defender for Cloud, Intune).
• o SIEM/XDR delivery and operations, particularly Microsoft Sentinel and Microsoft Defender XDR.
• o Identity and endpoint security fundamentals (e.g., Entra ID, Identity Protection, Defender for Endpoint).
• o Kusto Query Language (KQL) for detection, investigation, and reporting (SPL is a plus).
• o Vulnerability management tooling and process (e.g., Qualys) and remediation strategy development.
• o Security awareness training platforms and programs (e.g., KnowBe4), including campaign administration, phishing simulations, reporting, and remediation follow-up.
• o Scripting/automation using PowerShell, Python, and/or Azure CLI.

Preferred

• o Microsoft Purview (IRM, DLP, Insider Risk) and governance concepts.
• o SOAR and automation concepts and process design.
• o Managed Detection and Response (MDR) experience and detection engineering in a managed services model.
• o CrowdStrike Endpoint/Identity/XDR experience.
• o Cloud security exposure beyond Microsoft (AWS/GCP) and related security services.
• o Experience with Azure DevOps and process-driven delivery.
• o Microsoft Foundry, Microsoft 365 Copilot, and Microsoft Security Copilot familiarity.

REQUIREMENTS

This position requires that the applicant be a professional leader. ProArch is looking for a candidate who can fulfill the following:

• Outstanding Written, Verbal, Technical, Non-Technical, communication & presentation skills.
• Self-directed with the ability to prioritize and handle multiple tasks concurrently, and of high quality.
• Proven collaborator. Experience in mentoring and guiding a highly technical team.
• Eager learner continually improving skill sets, earning certifications, and gaining industry knowledge.
• Skilled in leading a conversation with client to drive security strategy and program improvement.
• Exceptional analytical skills.
• Ability to communicate clearly in English (written and spoken) with both technical and non-technical stakeholders.
• Ability to prioritize effectively and handle shifting priorities professionally.
• Produce and review reports to support project deliverables.
• Ongoing training and professional certifications are part of the job requirements.
• Create clearly stated remediation recommendations based on industry best practice.
• Successfully interface with clients, both internally and externally.
• Document and explain technical details in concise and clear manner.
• Manage personal schedule and project tasks.
• Provide weekly time accounting and monthly expense reports.
• Travel as required for client onsite kickoffs, workshops, and escalations (primarily Upstate NY; occasional out-of-state).

EDUCATION AND CERTIFICATION

• BS or MS in Computer Science / Engineering or significant demonstratable experience in Microsoft Cloud Security.
• Must have the following certifications. If not held at time of hire, must be attained within 6 months after hire:
• o Microsoft: AZ-900
• o Microsoft: SC-300
• o Microsoft: AZ-500
• Preferred certifications: ISC2 CISSP; Microsoft SC-200; and/or certifications such as CEH, CCSP, CISM