security consultant

Capgemini - Zcomme

The Role
 The OT Cybersecurity Consultant – L2 is responsible for delivering advanced ICS/OT cybersecurity monitoring, analysis, and incident response services for critical industrial environments. The role involves hands-on operation and optimization of Nozomi Networks, Industrial Defender, and Microsoft Sentinel, supporting managed security services, threat detection, vulnerability management, and compliance monitoring across OT environments. The consultant acts as a key escalation point between L1 analysts and L3 specialists, ensuring secure and resilient plant operations. Key Responsibilities: 1. ICS/OT Managed Security Monitoring • Deliver 8x5 managed cybersecurity monitoring services for ICS/OT environments. • Monitor, analyze, and triage security events and alerts using Nozomi Networks, Industrial Defender, and Microsoft Sentinel. • Identify anomalous behavior, unauthorized changes, baseline deviations, and potential cyber threats. • Validate alerts, reduce false positives, and perform alert tuning and suppression. 2. OT Security Platform Consulting & Operations Nozomi Networks • Monitor OT network traffic, asset discovery, vulnerabilities, and behavioral anomalies. • Analyze ICS protocol traffic (Modbus, DNP3, Profinet, OPC-UA/DA, etc.). • Identify dominant risks, unsafe commands, and abnormal process behavior. Industrial Defender • Manage OT asset inventory, configuration baselines, vulnerability data, and compliance reporting. • Detect unauthorized configuration or firmware changes across ICS assets. • Support compliance activities aligned with IEC 62443, NIST, and internal standards. Microsoft Sentinel • Integrate OT security logs and alerts into Sentinel. • Develop and tune analytics rules, correlation logic, workbooks, and alert workflows. • Correlate IT and OT security telemetry to enhance threat visibility. 3. Security Event Management & Use Case Development • Design and implement custom detection use cases and event processing rules. • Develop advanced correlation scenarios for: • Plant process data • Network sensors • Endpoint and anti-malware telemetry • Policy, compliance, and vulnerability monitoring • IOC-based detections • Fine-tune alerts, baselines, and thresholds to optimize detection accuracy. 4. Threat Intelligence & IOC Management • Manage OT threat intelligence and IOC feeds using STIX, SNORT, and YARA formats. • Ingest advisories from ICS-CERT, US-CERT, vendors, and threat intelligence sources. • Identify known bad behavior, rogue devices, suspicious accounts, and malicious indicators. 5. Vulnerability, Risk & Compliance Consulting • Identify and classify ICS/OT critical assets and their cyber risk exposure. • Monitor vulnerabilities across PLCs, RTUs, HMIs, servers, and OT network devices. • Identify non-compliant assets, insecure configurations, and process deviations. • Support remediation and mitigation planning aligned with Work Permit (WP) and Management of Change (MOC) processes. 6. Asset, Log Source & Integration Management • Onboard new OT assets using agentless (Nozomi) and agent-based (Industrial Defender) methods. • Retire decommissioned assets from monitoring platforms. • Onboard, normalize, and optimize OT and IT log sources in Microsoft Sentinel. • Improve event parsing, detection logic, and rule libraries. • Configure advanced monitoring features such as process, registry, and socket monitoring. 7. ICS/OT Protocol & Process Security • Monitor and analyze industrial protocols: • Modbus • DNP3 • Profinet • OPC-UA / OPC-DA • Identify unsafe control commands, process manipulation risks, and industrial-specific attack patterns. • Detect incompliant operational processes and unauthorized control activities. 8. Incident Response, Investigation & Threat Hunting • Perform continuous security monitoring and risk assessment. • Handle and analyze: • Up to 10 ICS/OT cybersecurity incidents, including root cause analysis • Up to 15 investigation requests from Information Security teams • Conduct proactive threat hunting and report at least 5 significant ICS/OT risk findings. • Collect forensic artifacts and support Tier 3 teams during complex investigations. • Escalate incidents with clear risk, impact, and remediation recommendations. 9. Reporting, Documentation & Stakeholder Support • Prepare operational, security, and compliance reports. • Maintain documentation for: • Compliance and audits • Disaster Recovery (DR) • SOPs and operational procedures • Support customer and internal stakeholder requests related to OT cybersecurity posture.
 
Requirements
 Required Skills & Qualifications Technical Skills • Hands-on experience with Nozomi Networks, Industrial Defender, and Microsoft Sentinel • Strong understanding of ICS/OT architecture, Purdue model, and industrial environments • Experience in SIEM correlation, alert tuning, and use case development • Knowledge of ICS protocols, OT threat vectors, and vulnerability management • Incident response and forensic analysis experience in OT environments Soft Skills • Consulting mindset with strong analytical and problem-solving abilities • Ability to communicate complex OT security risks to technical and non-technical stakeholders • Comfortable working in 24x7 operational environments Experience • 10–12 years in cybersecurity • 5+ years in ICS/OT cybersecurity or industrial environments Preferred Certifications • GICSP • IEC 62443 (Foundation / Practitioner) • GCIA / GRID • CISSP / CISM • Microsoft Sentinel / SC-200
 
About the company
 Capgemini is a global leader in partnering with companies to transform and manage their business by harnessing the power of technology. The Group is guided everyday by its purpose of unleashing human energy through technology for an inclusive and sustainable future. It is a responsible and diverse organization of 350,000 team members in more than 50 countries. With its strong 55-year heritage and deep industry expertise, Capgemini is trusted by its clients to address the entire breadth of their business needs, from strategy and design to operations, fueled by the fast evolving and innovative world of cloud, data, AI, connectivity, software, digital engineering and platforms. The Group reported in 2022 global revenues of 22 billion.

OT Cyber Security Consultant

Secova

We are hiring an Oracle Fusion GRC Security Consultant to support Oracle ERP security and governance initiatives. This role will focus on Oracle Fusion security configuration, GRC controls, and integration between Oracle EPM and Oracle Risk Management Cloud.Key Responsibilities<ul><li>Design and implement Oracle Fusion ERP security roles and access controls</li><li>Configure and support Oracle Risk Management Cloud</li><li>Perform security configuration, testing, and control validation</li><li>Support integration between Oracle EPM and Oracle ERP</li><li>Ensure Segregation of Duties (SoD) and GRC compliance</li><li>Work with functional and technical teams on ERP security</li><li>Document security configurations and testing results</li><li>Support ERP security audits and compliance reviews</li></ul>Required Skills<ul><li>Strong experience in Oracle Fusion ERP Security</li><li>Experience with Oracle Risk Management Cloud</li><li>Knowledge of Oracle GRC modules and SoD controls</li><li>Experience with ERP security role design and access management</li><li>Experience supporting Oracle EPM integrations</li></ul>Work Details<ul><li>Location: Chicago, IL (Onsite)</li><li>Contract: 4 Months</li><li>Start Date: March 30, 2026</li><li>Hours: 40 per week</li></ul>Pay: $58.67 per hourWork Location: In person

Oracle Fusion GRC Security Consultant

Smart Tech On Demand

Location: Philadelphia + Delaware, Montgomery, Bucks &amp; Chester CountiesCompensation: $60,000&ndash;$120,000+ OTE (performance-based commissions + monthly accelerators + recurring revenue incentives)Territory: Limited appointments per county (1&ndash;2 slots available)Type: Independent ContractorAbout the CompanySmart Tech On Demand is a professional security integration company serving Philadelphia and the surrounding counties (Delaware, Montgomery, Bucks, Chester). We install and service alarm systems, commercial surveillance, and access control for residential and commercial clients &mdash; with a standardized package model, a performance-driven team culture, and a clear path to growth.About the RoleWe're expanding our commercial division and appointing territory consultants to sell a standardized package model: Alarm + Cameras + Access Control + Monitoring (Portfolio Protection Standard &ndash; PPS). You'll work with property managers, multi-site operators, retail/office/light industrial clients, and businesses needing controlled staff access and audit trails.What You'll Do■ Prospect and book walkthroughs via phone, email, LinkedIn, and local outreach■ Run site assessments &mdash; entry points, blind spots, access control gaps■ Present structured proposals using simple package tiers (no messy quoting)■ Drive monitoring adoption and multi-site replication across accounts■ Maintain a clean CRM pipeline with accurate stages, next steps, and follow-up datesWhat We're Looking For■ Strong closer with professional presence &mdash; B2B sales background preferred■ Comfortable with outbound activity and disciplined, consistent follow-up■ Organized and coachable &mdash; this is a scoreboard-driven team with clear standards■ Can communicate value in terms clients care about: liability reduction, operational control, standardizationPay: $69,500.01 - $120,698.93 per yearBenefits:<ul><li>Employee discount</li><li>Flexible schedule</li><li>Referral program</li></ul>Experience:<ul><li>B2B sales: 3 years (Preferred)</li></ul>Ability to Commute:<ul><li>Southeastern, PA (Required)</li></ul>Willingness to travel:<ul><li>100% (Required)</li></ul>Work Location: On the road

Commercial Security Consultant

Amazon Web Services

<div><h2 class="jobSectionHeader">DESCRIPTION</h2>
The Amazon Web Services Professional Services (AWS ProServe) team is seeking a skilled Senior Delivery Consultant to join our Cloud Security team. As a Senior Security Consultant, you&rsquo;ll work closely with customers to design, implement, and automate solutions in AWS to protect customer assets, enable customer security teams to operate more effectively, and ensure customers don&rsquo;t accept unnecessary risk. 
 
You will work in fast-paced, complex projects that focus on delivering transformative business and security outcomes for customers globally. The ideal candidate is a highly skilled technical security professional with the ability to coach and guide executive security and cloud leaders in their journey, addressing topics such as security strategy and optimizing cloud security operations while being able to dive deep into AWS security technology. Along the way, you&rsquo;ll be expected to invent, extend, and adapt technology to tailor solutions to customer needs as well as coach and mentor junior consultants to enable their success. 
 
The AWS Professional Services organization is a global team of experts that help customers realize their desired business outcomes when using the AWS Cloud. We work together with customer teams and the AWS Partner Network (APN) to execute enterprise cloud computing initiatives. Our team provides assistance through a collection of offerings which help customers achieve specific outcomes related to enterprise cloud adoption. We also deliver focused guidance through our global specialty practices, which cover a variety of solutions, technologies, and industries. 
 
Key job responsibilities 
As an experienced technology professional, you will be expected to: 
1. Act as the technical leader for customer engagements and/or the security workstreams of engagements, leading teams of consultants. 
2. Lead internal initiatives to deliver quantifiable impact 
3. Develop strategic relationships with internal and external leaders 
4. Design and implement complex, scalable, and secure AWS solutions tailored to customer needs 
5. Enable and engage delivery partners in project delivery 
6. Provide mentorship and coaching to develop others 
 
A day in the life 
You'll work with colleagues and customers to design, develop and implement security solutions that solve real-world problems. You'll have full access to all of AWS's Infrastructure and Agentic-AI tools. You'll spend your days innovating, building and deploying industry-leading technology.
 
 
About the team 
ABOUT AWS: 
 
Diverse Experiences
 
Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn&rsquo;t followed a traditional path, or includes alternative experiences, don&rsquo;t let it stop you from applying.
 
 
Why AWS
 
Amazon Web Services (AWS) is the world&rsquo;s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating &mdash; that&rsquo;s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. 
 
Work/Life Balance
 
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there&rsquo;s nothing we can&rsquo;t achieve in the cloud. 
 
Inclusive Team Culture
 
AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do. 
 
Mentorship and Career Growth 
We&rsquo;re continuously raising our performance bar as we strive to become Earth&rsquo;s Best Employer. That&rsquo;s why you&rsquo;ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.<h2 class="jobSectionHeader">
BASIC QUALIFICATIONS</h2><ul><li>5+ years of cloud architecture and solution implementation experience</li><li>5+ years of external or internal customer facing, complex and large scale project management experience</li><li>Bachelor's degree in computer science, engineering, mathematics or equivalent</li><li>3+ years of security, compliance and risk management experience</li><li>5+ years of integration, testing and automation experience</li></ul><h2 class="jobSectionHeader">
PREFERRED QUALIFICATIONS</h2><ul><li>Knowledge of AWS services including compute, storage, networking, security, databases, machine learning, and serverless technologies</li><li>degree in advanced technology, or AWS Professional level certification</li><li>Knowledge of security and compliance standards including HIPAA and GDPR</li><li>Experience communicating technical concepts to diverse audiences in pre-sales environments</li><li>Experience scripting for automation (e.g., Python, Perl, Ruby)</li><li>Experience in the financial services industry</li><li>Hands-on technical expertise in building security capabilities in code, deploying infrastructure as code, and implementing enterprise security solutions (e.g. WAF, IPS, Anti-DDOS, SIEM)</li></ul> 
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. 
 
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you&rsquo;re applying in isn&rsquo;t listed, please contact your Recruiting Partner. 
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life &amp; AD&amp;D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits. 
USA, NJ, Jersey City - 169,000.00 - 228,600.00 USD annually 
USA, NY, New York - 169,000.00 - 228,600.00 USD annually</div>

Senior Security Consultant, Global Proserve Security

Fortinet

<div>Responsibilities:
Customer Engagements : Collaborate with clients to understand their security needs and objectives. Lead and deliver Red Team and penetration testing engagements, ensuring high-quality results that align with customer expectations.
Red Team Operations : Plan and execute realistic and sophisticated Red Team operations to simulate advanced cyber threats. Mimic adversary tactics, techniques, and procedures (TTPs) to identify and exploit vulnerabilities in client environments.
Penetration Testing : Conduct thorough penetration tests on client systems, networks, and applications. Provide actionable insights and recommendations for remediation based on identified vulnerabilities.
Technical Expertise: Demonstrate proficiency in a variety of offensive security tools and techniques. Stay current with industry trends, emerging threats, and advancements in offensive security methodologies.
Documentation and Reporting : Document all testing procedures, findings, and recommendations in clear and concise reports. Communicate technical details effectively to both technical and non-technical stakeholders as well as provide proactive guidance on improving an organization&rsquo;s security posture.
Required Skills :
<ul><li>Excellent written and verbal communication skills &ndash; English
</li><li>Experience developing and conducting red team and penetration testing engagements
</li><li>Experience performing application security assessments
</li><li>Public speaking experience at known security conferences is a plus
</li><li>Capable of performing assessments with common offensive toolsets as well as the ability to build custom tools and implants
</li><li>Solid knowledge of scripting languages such as Python, Perl, PowerShell, Ruby
</li><li>Development experience using C, C++, .NET, Java, Go
</li><li>Solid understanding of Active Directory and Azure AD
</li><li>Experience carrying out vulnerability assessments, physical assessments, wireless assessments, and social engineering campaigns.
</li><li>Strong understanding of operating system internals and endpoint security controls such as EDR and various evasion techniques
</li></ul>Qualifications:
<ul><li>Bachelor&rsquo;s Degree in Computer Engineering, Computer Science or related field
</li><li>Or 8 - 10+ years&rsquo; experience in Attack and Penetration testing roles
</li><li>Certifications in offensive security such as CREST, OSCP, OSEP, GXPN, GRTP, etc.
</li></ul>#LI-BG1</div>

Senior Offensive Security Consultant – FortiGuard Proactive Services

Burraq Consulting

<div><div><div>Closing on: May 31, 2026</div></div><div><div><div><div>
Job Category: Remote
</div><div>Job Type: Freelance
</div><div>Job Location: Pakistan
</div><div>Salary: Project Based
</div><div>Experience: 5 Years
</div><div>Department: Auditing and Compliance
</div><div>Education: Masters in Cyber Security
</div></div></div></div><div><h3 class="jobSectionHeader">About Us</h3>

Burraq Consulting is a leading training and consultancy firm in Pakistan, delivering professional services in HSE, ISO certifications, corporate training, and compliance solutions. We are expanding our technical team and looking for a Senior Information Security Consultant who can conduct ISO 27001 audits and meet the ISO requirements for our clients.
<div>
</div><h3 class="jobSectionHeader">Job Overview</h3>

We are seeking experienced ISO 27001 Consultants to support multiple client engagements on a project-to-project basis. The consultant will be responsible for implementing, auditing, and maintaining Information Security Management Systems (ISMS) in line with ISO 27001 requirements.

This role is ideal for professionals who prefer flexible, assignment-based work and have hands-on experience delivering ISO 27001 certification projects across different industries.
<div>
</div><h3 class="jobSectionHeader">Key Responsibilities</h3>
<ul><li>Lead end-to-end ISO 27001 implementation projects</li>
<li>Conduct gap assessments against ISO/IEC 27001 standards</li>
<li>Develop and review ISMS documentation (policies, procedures, risk registers, SoA, etc.)</li>
<li>Perform risk assessments and risk treatment planning</li>
<li>Provide guidance on Annex A controls implementation</li>
<li>Conduct internal audits and support clients during certification audits</li>
<li>Deliver awareness and training sessions to client teams</li>
<li>Liaise with certification bodies and external auditors</li>
<li>Ensure project timelines, deliverables, and quality standards are met</li>
</ul><h3 class="jobSectionHeader">Requirements</h3>
<ul><li>Proven experience in ISO/IEC 27001 implementation or consulting</li>
<li>Strong understanding of ISMS framework and risk management methodologies</li>
<li>Experience with Statement of Applicability (SoA) and control mapping</li>
<li>Familiarity with ISO 27001:2022 standard (preferred)</li>
<li>Lead Implementer and/or Lead Auditor certification (highly preferred)</li>
<li>Ability to manage multiple clients and projects independently</li>
<li>Strong documentation and communication skills</li>
</ul><h3 class="jobSectionHeader">Preferred Skills</h3>
<ul><li>Experience in related standards (e.g., ISO 22301, ISO 20000, GDPR)</li>
<li>Background in IT, cybersecurity, or information security</li>
<li>Experience working with certification bodies</li>
<li>Industry exposure (e.g., IT, healthcare, finance, telecom)</li>
</ul><h3 class="jobSectionHeader">Engagement Model</h3>
<ul><li>Project-based assignments with defined scope and timelines</li>
<li>Flexible working arrangements (remote or on-site depending on client needs)</li>
<li>Compensation based on project scope, complexity, and duration</li>
</ul><h3 class="jobSectionHeader">How to Apply</h3>

Interested candidates are encouraged to submit their CV along with a portfolio of recent design work to: people@burraqconsulting.com with subject line &ldquo;Information Security Consultant&ldquo;.</div></div>

Senior Information Security (ISO 27001) Consultant

Confidential Government

<div>
 
 We are seeking a Penetration Tester Consultant to act as an ethical adversary and relentlessly test the organization's defensive barriers.
 
 
 
 
 
 Role Overview: An elite operator role focused on simulating advanced adversary tactics and attack paths before real threat actors can disrupt operations.
 
 
 Core Purpose: To strengthen the security posture by discovering and remediating weaknesses through sophisticated, real-world attack simulations.
 
 
 
 
 
 Key Responsibilities:
 
 <ul>
 <li>
 Execute full-scope adversary simulations and complex penetration testing missions.
 </li>
 <li>
 Research and develop custom exploits and payloads to test the effectiveness of EDR/AV solutions.
 </li>
 <li>
 Provide technical debriefs to help Blue Teams refine detection and response rules.
 </li>
 </ul>
 
 
 
 
 Qualifications:
 
 <ul>
 <li>
 Bachelor's degree in Computer Science, Mathematics, or Software Engineering.
 </li>
 <li>
 5+ years of experience in Offensive Security, including 3+ years in multi-vector Red Team operations.
 </li>
 <li>
 Certifications: OSCP, OSEP, or CRT.
 </li>
 <li>
 Competencies: Deep understanding of Windows/Linux internals and expert knowledge of the MITRE ATT&amp;CK framework.
 </li>
 </ul>
 
 
</div>

Penetration Tester Consultant

Search 6955+ Security consultant jobs near you this May. New roles added regularly across leading industries. Apply today.