Cyber Security Lead Consultant

Role Summary

Seeking an experienced Cyber Security Lead Consultant to provide L3/L4 support for network security operations intrusion detection/prevention firewall management threat monitoring incident response and detection engineering. The role will partner with SOC infrastructure network cloud and application security teams to strengthen enterprise security posture and ensure effective threat detection and response.

Key Responsibilities
Manage and optimize IDS/IPS platforms and network security controls.
Investigate intrusion alerts anomalous traffic suspicious activity and indicators of compromise (IOCs).
Tune IDS/IPS signatures policies thresholds and detection rules.
Analyze packet captures network traffic firewall logs and security events.
Administer and troubleshoot Palo Alto Check Point Cisco FirePOWER firewalls VPNs and threat prevention technologies.
Review firewall policies access controls VPN configurations and security rules.
Perform threat hunting and advanced security monitoring across firewall IDS/IPS VPN endpoint cloud and SIEM platforms.
Correlate security events to determine scope impact and root cause.
Act as L3/L4 escalation point for critical security incidents.
Lead investigation containment remediation and root cause analysis activities.
Develop and enhance SIEM correlation rules and IDS/IPS detection use cases.
Identify monitoring gaps and recommend security improvements.
Prepare incident reports executive summaries and corrective action recommendations.
Mentor L1/L2 analysts and contribute to SOPs runbooks and operational documentation.
Support governance reviews audits reporting and continuous service improvement initiatives.
Required Skills

Network Security

IDS/IPS administration and monitoring
Enterprise firewall management
Firewall policy and rule-base administration
VPN network segmentation and secure remote access
Packet analysis and network traffic investigation
TCP/IP DNS HTTP/HTTPS SSL/TLS

Security Platforms

Palo Alto Networks
Check Point Firewall & VPN
Cisco FirePOWER
Microsoft Sentinel Splunk QRadar or ArcSight

Security Operations

Security event analysis and incident response
Threat hunting and IOC analysis
Root cause investigation
Detection engineering fundamentals
Security documentation and escalation management

Technical Skills

Wireshark tcpdump or similar tools
KQL SPL or equivalent query languages
Security logging and monitoring architecture
PowerShell or Python (preferred)
Preferred Knowledge
MITRE ATT&CK Framework
Cyber Kill Chain
NIST Incident Response
ISO 27001
Cloud Security Monitoring
Threat Intelligence & SOAR
Vulnerability Management
ITIL Incident Problem & Change Management

Experience & Qualifications
8-12 years of cybersecurity experience.
Strong hands-on experience in firewall security IDS/IPS SOC and network security monitoring.
Experience handling L3/L4 escalations and high-severity incidents.
Experience with enterprise firewall IDS/IPS and SIEM technologies.
Experience working with cross-functional teams and mentoring junior analysts.
Bachelors degree in Computer Science Cybersecurity Information Security Engineering or related field.

Preferred Certifications

PCNSE CCSE Cisco Security/FirePOWER Microsoft SC-200 Splunk Enterprise Security GCIA GCIH CISSP CompTIA CySA or Security.

Areas of Responsibility

Requirement Gathering-Define requirement specifications basis workshops and discussions with senior client stakeholders and identify optimisation opportunities to be considered as part of design process.

Feasibility Analysis-Undertake feasibility analysis to identify potential constraints and change requirements by engaging with client business stakeholders and cross-functional teams.

Solution Design-Develop solution design across modules and systems ensuring scalability feasibility and alignment with existing enterprise architecture.

Configuration and Customisation-Conduct design reviews to ensure configurations align with defined development frameworks. Recommend best practices and implement solutions to enhance business processs quality.

Technology Harmonisation-Review the integration architecture across systems ensuring its alignment with the defined integration framework. Implement the data migration strategy to ensure accurate flow of data across multiple applications.

Troubleshooting and optimisation-Optimize solution performance by ensuring alignment with established cost scalability and efficiency targets.

Documentation-Oversee creation and review of functional and technical documentation ensuring alignment with architectural standards across modules and project teams.