Full Time Cybersecurity Consultant (SOC) Jobs, in Pentech Solution Federal Territory - Maukerja

Overview

Pentech is seeking an experienced, highly technical, and client-focused Cybersecurity Consultant (SOC) to serve as the primary bridge between our Managed Security Services Provider (MSSP) operations and our valued client portfolio. In this pivotal role, you will act as the principal client contact, lead high-severity incident responses, oversee SOC operational quality, and drive strategic security improvements across client environments.

The ideal candidate possesses deep technical expertise in security operations—specifically including hands-on deployment and management of SIEM platforms—alongside exceptional executive communication, consulting, and client engagement capabilities. You will work standard office hours while providing standby availability for off-hours critical client escalations.

Key Responsibilities

1. Client Engagement & Advisory (Primary Contact)

Serve as the primary client-facing technical lead and trusted advisor for all SOC, incident response, and security operations matters across assigned accounts.

Lead regular operational syncs, technical briefings, and executive security reviews with client stakeholders (CISOs, IT Directors, and Security Leads).

Translate complex technical security findings into actionable business risk insights and executive summary reports.

Manage client expectations, escalations, and satisfaction, ensuring service alignment with contractual obligations and security best practices.

2. Reporting & Performance Visibility

Prepare, review, and deliver comprehensive weekly and monthly security reports for both internal Pentech management and client leadership.

Analyze threat trends, incident metrics, SLA performance (MTTD/MTTR), and security posture health to highlight key accomplishments and areas of exposure.

Deliver quarterly security review presentations detailing threat landscapes, emerging risk vectors, and recommended security roadmap enhancements.

3. Advanced Technical Lead & L3 Escalation Support

Act as the Tier 3 (L3) technical escalation point for the SOC team during complex, high-severity, or evasive security incidents.

Oversee technical investigations performed by SOC analysts to ensure investigation depth, root-cause accuracy, and adherence to containment playbooks.

Perform deep-dive incident triage, digital forensics analysis, and attack path mapping during major security breaches.

Lead critical incident response efforts, coordinating backend technical resources and maintaining real-time communication with client leadership throughout the incident lifecycle.

4. Platform Management & Security Engineering (SIEM)

Deploy, configure, manage, and optimize SIEM platform modules across client environments.

Design and implement custom log ingestion pipelines, correlation rules, EDR/XDR policies, and threat detection use cases tailored to client-specific architectures.

Ensure optimal health, coverage, and performance of SIEM platform deployments, troubleshooting agent deployment issues and log parsing errors.

5. Security Hardening & Posture Optimization

Proactively evaluate client network, endpoint, cloud, and identity architectures to identify security gaps and vulnerabilities.

Propose, design, and guide the implementation of tailored security hardening recommendations (e.g., identity security policies, attack surface reduction, EDR prevention policies, network segmentation).

Collaborate with internal Pentech Security Engineers and client IT teams to drive continuous hardening and posture improvement initiatives.

Working Schedule & On-Call Requirements

Primary Schedule: Standard Office Hours (Monday to Friday).

Standby / On-Call Expectation: Required to be on standby outside regular office hours (nights, weekends, and public holidays) for critical client engagements and high-severity (Severity 1 & 2) security incident escalations.

Key Performance Indicators (KPIs)

Client CSAT & Retention: Maintain a client CSAT rating of ≥ 92% across assigned client accounts.

Reporting Timeliness & Quality: 98% on-time delivery of weekly operational reports and monthly executive security reports.

Critical Incident SLA Management: Ensure 98% compliance with critical incident escalation and initial client briefing SLAs (≤ 15–30 minutes from L3 escalation).

Platform Optimization (SIEM): Achieve ≥ 95% log ingestion health and agent coverage across managed SIEM client environments.

Security Hardening Delivery: Propose at least 2 structured security hardening or posture improvement initiatives per client per quarter.

Skills and Experience We Are Looking For

Education & Experience:

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience.

7+ years of progressive experience in Cybersecurity, with at least 3+ years in a client-facing consulting or technical lead role within an MSSP or security advisory firm.

Proven track record operating as a Senior/L3 Incident Response Specialist or Senior SOC Lead.

Technical Mastery:

Direct hands-on experience deploying, managing, and tuning SIEM Platforms.

Deep, practical understanding of attack frameworks (MITRE ATT&CK), threat actor TTPs, network protocols, operating system internals (Windows, Linux, macOS), and cloud security architectures (AWS, Azure, GCP).

Demonstrated capability in root cause analysis, malware triage, and threat hunting methodologies.

Consulting & Soft Skills:

Exceptional written and verbal communication skills, with proven ability to present complex technical findings to C-level executives.

Strong leadership and oversight capabilities to guide and review technical work performed by SOC teams.

A calm, structured demeanor during critical crisis management and breach handling scenarios.

Advantage (Preferred Qualifications)

Active professional cybersecurity certifications: CISSP, CISM, GCIH, GCFA, GNFA, OSCP, or equivalent.

Experience implementing and auditing regulatory compliance frameworks (ISO 27001, SOC 2, PCI-DSS, NIST CSF).

Hands-on experience with SOAR platform automation and Python/PowerShell scripting for security integrations.