Senior Cybersecurity Consultant - Blue Team Lead

- Lead and mentor a team of SOC analysts, providing daily direction and performance feedback - Establish and enhance SOC workflows, escalation procedures, and response playbooks - Act as a technical escalation point for complex incidents and client inquiries - Cultivate a culture of continuous improvement, knowledge sharing, and professional growth within the team - Configure, implement, and manage endpoint detection and response (EDR) and extended detection and response (XDR) platforms in diverse client environments - Optimize detection policies and sensor setups to ensure security effectiveness while maintaining operational continuity - Create, analyze, and present security reports to highlight threat trends and recommend risk reduction measures - Stay updated on EDR/XDR capabilities, platform enhancements, and industry best practices - Manage comprehensive incident response engagements from initial triage to containment, eradication, and post-incident analysis - Assess alerts, telemetry, and indicators of compromise to determine scope, severity, and business impact - Coordinate multi-functional response activities and communicate effectively with technical teams and executive stakeholders - Document incidents thoroughly, including root cause analysis, lessons learned, and strategic remediation plans - Design and implement targeted security awareness programs tailored to client workforce characteristics and risk levels - Develop engaging training materials addressing phishing, social engineering, insider threats, and secure behaviors - Conduct simulated phishing campaigns, review results, and provide actionable recommendations for improvement - Measure training effectiveness and refine program design based on data-driven insights - Provide strategic security consulting and tactical recommendations aligned with client business goals - Assist with security assessments, gap analyses, audits, and compliance initiatives - Contribute to the creation and refinement of security policies, standards, and procedures for client and internal practice development - Stay informed about the evolving threat landscape, emerging vulnerabilities, and advancing security technologies