Senior Information Security Consultant I

We are looking for an experienced and highly motivated Senior Information Security Consultant I to join our cybersecurity team.

The ideal candidate will bring deep expertise in Phishing Threat Mitigation, Email Security, Microsoft Defender, and Security Operations (SOC & SIEM).

You will play a key role in protecting our organization against evolving email-based threats and ensuring robust incident response capabilities.

Key Responsibilities :

- Lead and manage the organization's email security infrastructure, including configuration, monitoring, and optimization of tools like Microsoft Defender and other email security platforms.

- Design, implement, and manage phishing threat detection and mitigation strategies.

- Investigate and respond to phishing incidents, coordinate with relevant stakeholders for containment and remediation.

- Monitor and analyze email threat intelligence feeds and proactively adjust policies and controls.

- Integrate email security with SIEM platforms for centralized monitoring and incident detection.

- Provide subject matter expertise in SOC operations, guiding junior analysts on phishing-related escalations.

- Ensure adherence to email authentication protocols (e.g., SPF, DKIM, DMARC).

- Maintain detailed documentation of configurations, response procedures, and incident handling processes.

- Collaborate with internal teams to improve cybersecurity awareness and training, especially around email threats.

- Contribute to security audits, risk assessments, and regulatory compliance efforts.

Key Skills & Technologies :

- Deep knowledge of phishing techniques, email threat vectors, and countermeasures.

- Expertise in Microsoft Defender for Office 365, and similar tools (e.g., Proofpoint, Mimecast, Barracuda).

- Hands-on experience with SIEM platforms such as Splunk, QRadar, or Microsoft Sentinel.

- Familiarity with email security protocols : SPF, DKIM, DMARC.

- Experience working in or with a Security Operations Center (SOC).

- Strong scripting and automation skills (PowerShell preferred) for security tool integration and response.

- Sound knowledge of security frameworks (NIST, ISO 27001, etc.) and incident management processes.

Qualifications :

- Bachelor's degree in Cybersecurity, Computer Science, or a related field.

- Relevant certifications are a plus (e.g., CISSP, CEH, Microsoft SC-200, GIAC certifications)