Security Consultant Secops

Lead SecOps discovery workshops, capture current-state SOC maturity, map detection, response, escalation, and operational gaps, and translate findings into pragmatic modernization roadmaps. Develop KQL hunting logic, incident triage workflows, response playbooks, and reusable delivery assets that reduce manual effort and improve analyst productivity.

Apply agentic SOC patterns using SOCBot / Autonomous SOC concepts, with clear human-in-the-loop approval, read/write separation, auditability, and safe automation guardrails. Partner with security architects, customer SOC leaders, product groups, and engineering teams to resolve delivery risks, validate design choices, and drive customer outcomes. Support pre-sales and solution shaping through effort estimation, technical assumptions, discovery questions, solution narratives, and customer-facing demos.

Technical Depth Expected- SecOps delivery Automation and AI Security Copilot usage, Azure AI Foundry awareness, Logic Apps, Azure Functions, PowerShell, KQL, APIs, managed identities, OAuth / OBO concepts, and automation safety controls.

Consulting and Delivery Executive communication, discovery facilitation, architecture documentation, risk-based prioritization, stakeholder management, quality delivery, and reusable IP contribution. 5+ years of experience in cybersecurity consulting, security operations, SOC engineering, incident response, SIEM/SOAR, or related security delivery roles. Strong understanding of detection engineering, incident triage, threat hunting, investigation lifecycle, containment / remediation options, and SOC governance.

Ability to produce high-quality customer-facing deliverables such as architecture documents, discovery outputs, deployment plans, design decisions, risk registers, and operational runbooks. Experience communicating complex security concepts to technical teams, program stakeholders, and executive audiences. Degree or equivalent experience in Computer Science, Engineering, Information Security, Cybersecurity, or a related discipline.

Ability to identify repeatable delivery IP opportunities and convert project learnings into reusable accelerators, templates, workshops, and enablement materials. Comfortable working across multi-cloud and hybrid customer environments, including ITSM, CMDB, ticketing, threat intelligence, and vulnerability management integrations. Growth mindset to continuously learn EAG Security agent portfolio capabilities and position them in customer conversations and delivery engagements.