Senior Technical Consultant
About the job
About the Senior Technical Consultant role
The Senior Technical Consultant is responsible for supporting vulnerability management, threat analysis, and security operations to strengthen the organisation’s overall security maturity. This role monitors emerging vulnerabilities and threats, assesses and prioritises risks using CVSS, supports incident response and Cyber Defense Center operations, and coordinates with security teams to develop detection use cases and remediation strategies. The role also maintains vulnerability tracking, prepares security assessment reports, and provides stakeholders with actionable findings and recommendations while supporting rotational coverage across US, APAC, and EMEA time zones.
Key Responsibilities:
- Support and maintain vulnerability detection and mitigation best practices
- Apply threat and vulnerability management (VM) programs to information security practices and contribute to the continuous improvement of security maturity
- Participate in incident response triage and proactive analysis of information security-related vulnerabilities across networks, systems, and applications
- Analyze vulnerability feeds and support Cyber Defense Center (CDC) operations by providing Indicators of Compromise (IOC) and Indicators of Attack (IOA) based on vendor advisories, security alerts, and emerging threat trends
- Perform vulnerability analysis and apply the Common Vulnerability Scoring System (CVSS) to assess and prioritize vulnerabilities based on relevant vectors and metrics
- Detect and analyze the latest threats and vulnerability exploitation techniques, and coordinate with CDC and Endpoint Detection and Response (EDR) teams on detection signatures and the creation of security use cases to monitor or prevent related exploitations
- Provide regular updates to stakeholders through security assessment reports, including detailed security findings, risk assessments, and recommended remediation or workarounds
- Track and maintain the vulnerability management lifecycle to ensure timely remediation and closure of identified vulnerabilities
- Actively monitor and investigate the latest security vulnerabilities, vendor advisories, security incidents, and emerging penetration techniques, and notify relevant stakeholders when appropriate
- Participate in rotational shifts covering US, APAC, and EMEA time zones
Work Results
- Security tool configurations and updates
- Vulnerability management and security assessment reports
- Vulnerability tracking and remediation status reports
- Threat detection and monitoring use cases
- Security findings, analysis, and recommended remediation actions
