Senior Cyber Security Consultant

About the role

Jobline is hiring a Senior Cyber Security Consultant to act as the enterprise cyber security technical focal point during cyber incidents. The role works closely with SOC, CISO, infrastructure, network, cloud, application and vendor teams, and covers incident response, threat hunting, vulnerability management and security monitoring improvements.

Key responsibilities

• Support cyber incident response: triage, investigation, containment coordination, evidence gathering, remediation tracking and post-incident review.
• Conduct proactive threat hunting across enterprise infrastructure using SIEM, EDR, NDR, vulnerability management, asset discovery and other security tools.
• Identify suspicious behaviour, attack patterns, lateral movement, privilege misuse, exposed services and anomalous access.
• Develop and refine detection use cases, investigation playbooks, response procedures and escalation workflows.
• Improve security monitoring by finding gaps in logs, telemetry, asset visibility and detection rules, and work with SOC and central security teams to improve alert quality and incident response readiness.
• Support vulnerability management and risk-based remediation by correlating vulnerabilities with asset criticality, exposure and threat intelligence.
• Support initiatives such as NDR deployment, asset discovery, micro-segmentation, Zero Trust controls, PIAM/IAM adoption and security tool integration.
• Take part in security assessments, threat reviews, tabletop exercises, incident simulations and lessons-learned activities, and support root cause analysis and audit evidence collection.
• Prepare management reports, investigation summaries, threat hunting findings, risk updates, incident dashboards and security posture metrics.
• Maintain incident response runbooks, threat hunting procedures, SOPs, escalation guides and operational checklists, and guide internal teams on security best practices.

Required profile

• Bachelor's degree or diploma in Cybersecurity, Information Technology, Computer Science, Engineering or a related field.
• Minimum 7 years of experience in cybersecurity operations, incident response, threat hunting, SOC operations, detection engineering, infrastructure security or related roles.
• Strong understanding of the cyber incident response lifecycle and hands-on experience with security technologies.
• Ability to work across multiple teams during incidents and security projects.

Required skills

• SIEM, EDR, NDR, vulnerability management, threat intelligence platforms, asset discovery tools, firewalls and endpoint/network security controls.
• Network security, TCP/IP, routing, firewalls, VPNs, DNS, authentication, Windows/Linux, Active Directory and cloud security fundamentals.
• MITRE ATT&CK, Cyber Kill Chain, threat hunting methodologies and log/alert analysis.
• Familiarity with tools such as Microsoft Sentinel, Splunk, CrowdStrike, Tenable, Qualys, Darktrace, Palo Alto, Illumio, CyberArk, Delinea, Device42 or similar.