About this opportunity
Layer8security lists this Senior Cybersecurity Consultant, Blue Team Lead opportunity in northern, Kentucky. Review the employer’s description below for duties, qualifications and application requirements.
Job description
Senior Cybersecurity Consultant, Blue Team Lead
Summary
We are looking for a seasoned Senior Cybersecurity Consultant to serve as a hands‑on team lead within our Security Operations practice. This is a high‑impact, client‑facing role for a blue team professional who thrives in dynamic consulting environments, brings deep technical expertise across the defender stack, and has the leadership presence to mentor junior analysts and guide SOC operations across a diverse client portfolio. You will be the subject matter expert our clients rely on, leading incident response engagements, optimizing endpoint and detection strategies, and building security‑aware cultures across organizations of varying size and maturity.
Role Responsibilities
SOC Team Leadership and Oversight
Lead and manage a team of SOC analysts, providing day‑to‑day direction, mentorship, and performance guidance
Establish and continuously improve SOC workflows, escalation procedures, and response playbooks
Serve as a technical escalation point for complex incidents and client inquiries
Foster a culture of continuous improvement, knowledge sharing, and professional development within the team
Configure, deploy, and manage endpoint detection and response (EDR) and extended detection and response (XDR) platforms across diverse client environments, adapting quickly to each client’s existing toolset
Optimize detection policies and sensor configurations to balance security effectiveness with operational continuity
Generate, interpret, and present security reporting to identify threat trends and drive risk reduction recommendations
Maintain currency with evolving EDR/XDR capabilities, platform updates, and industry best practices
Lead end‑to‑end incident response engagements from initial triage through containment, eradication, and post‑incident review
Analyze alerts, telemetry, and indicators of compromise to assess scope, severity, and business impact
Coordinate cross‑functional response activities and communicate clearly with both technical teams and executive stakeholders
Produce thorough incident documentation including root cause analysis, lessons learned, and strategic remediation roadmaps
Design and deliver targeted security awareness programs tailored to client workforce profiles and risk posture
Develop engaging training content addressing phishing, social engineering, insider threats, and secure behaviors
Execute simulated phishing campaigns, analyze outcomes, and provide actionable improvement recommendations
Track training effectiveness metrics and iterate program design based on data‑driven insights
Provide strategic security consulting and tactical recommendations aligned to client business objectives
Support security assessments, gap analyses, audits, and compliance initiatives
Contribute to the development and refinement of security policies, standards, and procedures for clients and internal practice growth
Stay ahead of the evolving threat landscape, emerging vulnerabilities, and advancing security technologies
Qualifications and Requirements
Industry certifications such as CISSP, GCIH, GCIA, CEH, Security+, or platform‑specific credentials
Experience operating across multiple EDR/XDR platforms (e.g., CrowdStrike, SentinelOne, Microsoft Defender, Carbon Black) and SIEM solutions (e.g., Splunk, Microsoft Sentinel, IBM QRadar, Elastic)
Familiarity with compliance frameworks including NIST CSF, ISO 27001, PCI‑DSS, HIPAA, or SOC 2
Prior experience in a cybersecurity consulting or managed security services (MSSP) environment
Scripting or automation skills (Python, PowerShell, KQL, or similar) to support detection engineering and operational efficiency
Qualifications and Requirements
You are a builder and a leader, someone who can step into a client environment, quickly assess what’s there, and make it better. You communicate with confidence, operate with precision, and bring your team along with you.
Detail‑oriented with strong organizational and prioritization skills
Proactive, self‑directed, and comfortable owning outcomes in ambiguous situations
Collaborative team leader with a strong client service orientation
Genuinely committed to the craft, continuous learning is part of your identity
This is a hybrid position based out of our Malvern, Pennsylvania office, with flexibility for remote delivery and occasional on‑site presence. Travel to client sites may be required depending on engagement needs.
Job Type: Full‑time
Work Location: Hybrid remote in Malvern, PA 19355
Medical, vision, and disability insurance program
Employer‑funded life insurance for all employees
Unlimited vacation policy with a requirement to take at least two weeks
Encourage and compensate for advanced training, certifications, and industry events
Have a voice and be heard with the opportunity to make a positive difference
Layer 8 Security is an equal opportunity employer.
#J-18808-Ljbffr
Who can apply
Review the original listing for work authorization, qualifications and employer requirements.