Security Consultant (Mid/Senior/Principal)

Formula5; Irvine (CA); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Formula5 is seeking a Security Consultant to serve as trusted advisor in regulated industries, guiding clients through Microsoft security stack, from identity to cloud defenses and compliance programs.

You will lead architecture engagements, perform risk assessments, and deliver executive-ready artifacts while collaborating with cross-functional teams in fast-paced environments.

Qualifications

• 4+ years in cybersecurity consulting or architecture.
• Hands-on experience with Microsoft security stack and cloud security concepts.
• Familiar with HIPAA, NIST CSF, SOC 2, ISO 27001 or similar regulatory frameworks.

Responsibilities

• Lead security architecture and advisory engagements across client environments.
• Design and implement security solutions across the Microsoft ecosystem.
• Conduct threat modeling, security assessments, and risk reviews for cloud and hybrid environments.
• Guide clients through regulatory requirements and ensure audit-readiness.
• Collaborate with client security, infrastructure, and architecture teams to drive implementation.
• Develop high-quality deliverables and executive briefings.

Skills

Cybersecurity consulting

Cloud security

Regulated industries

Regulatory compliance

Stakeholder communication

Tools

Microsoft Sentinel

Defender for Endpoint/Identity/Cloud

Entra ID

Purview

Intune

Microsoft Defender for Cloud

Job description

Security Consultant (Mid/Senior/Principal)

About Us

Formula5 is a Microsoft consulting partner that solves the hardest data and technology challenges in regulated industries – healthcare, life sciences, financial services, and energy. We don’t chase commoditized work. We hire the best people, give them real ownership, and let them do what they’re great at.

About the Role

As a Security Consultant at Formula5, you will be a trusted advisor to clients navigating complex security challenges in some of the most regulated environments in the world. You will bring deep technical expertise and sharp judgment to engagements that demand both: designing secure architectures, assessing risk, and guiding clients through the Microsoft security stack with confidence. Whether you’re shaping a Zero Trust strategy, designing an AI-ready Data Protection framework, or hardening a cloud environment, you’ll own the work end-to-end and deliver outcomes that matter.

What You’ll Do

• Lead security architecture and advisory engagements across client environments, assessing current state, identifying gaps, and designing solutions that are both technically sound and aligned to business risk tolerance.
• Design and implement security solutions across the Microsoft ecosystem by implementing multi-layered defense with Microsoft Entra ID, Microsoft Defender suite, Purview, Intune, Microsoft Sentinel and Microsoft Defender for Cloud. Prepare tailored solutions that will translate gathered requirements and platform capabilities into real client outcomes.
• Conduct threat modeling, security assessments, and risk reviews for cloud and hybrid environments, producing findings and recommendations that executives and technical teams can act on.
• Guide clients through compliance and regulatory requirements relevant to their industry, including frameworks such as NIST, ISO 27001, SOC 2, HIPAA, and DORA, helping them build programs that are audit-ready and operationally sustainable.
• Collaborate with client security, infrastructure, and architecture teams to drive implementation, resolve blockers, and ensure that security controls are integrated, not bolted on.
• Support security incident response activities when needed, helping clients contain, investigate, and recover from incidents with clarity and speed.
• Develop high-quality deliverables, including assessments, roadmaps, architecture documents, and executive briefings, that reflect the depth of your expertise and set the standard for what good looks like.
• Contribute to practice development by bringing back knowledge from the field: refining methodologies, building reusable assets, tools and helping less experienced consultants grow.

What We’re Looking For

• 4+ years of experience in cybersecurity consulting, architecture, or engineering, with meaningful exposure to client-facing or advisory work
• Hands-on experience with the Microsoft security stack (Sentinel, Defender for Endpoint/Identity/Cloud, Entra ID, Purview, or similar)
• Solid grounding in cloud and hybrid security concepts, particularly in Microsoft environments
• Familiarity with regulatory and compliance frameworks applicable to regulated industries (HIPAA, NIST CSF, HITRUST, SOC 2, ISO 27001 or similar)
• Strong communicator, able to translate technical risk into business language and hold credible conversations from the SOC floor to the boardroom
• Relevant certifications are a plus: Microsoft Administrator or Expert in relevant areas, CISSP, CISM, or equivalent
• Experience across Mid / Senior / Principal levels; we will calibrate the role to your actual depth and scope of expertise

Why Join Formula5

• We’re not just another Microsoft Partner.
• We build relationships based on trust, expertise, and growth – both for our clients and our people.
• If you want to join a global, collaborative team and make a real impact in the identity space – we’d love to meet you!