[REMOTE] Consultant, Cybersecurity Engineering

Summary

BARR Advisory is a security and compliance solutions provider specializing in cybersecurity and compliance for organizations with high-value data. The Associate Consultant in Cybersecurity Engineering will support client security operations, including incident response and vulnerability management, while contributing to compliance and audit-readiness efforts.

Responsibilities

• Respond to client security alerts by performing initial triage, containment, and documentation of security incidents
• Execute vulnerability scans across client environments, analyze findings, and support remediation and patch validation
• Review firewall rules and network configurations to ensure alignment with security policies and best practices
• Support cloud security efforts across AWS, Azure, or GCP environments, including configuration reviews and hardening activities
• Partner with the GRC team to support internal audits, gap assessments, and control testing for frameworks such as ISO 27001:2022 and SOC 2
• Work directly with clients to collect, organize, and validate technical evidence for compliance engagements (SOC 2, ISO 27001:2022, FedRAMP, CMMC)
• Translate technical findings into clear documentation, reports, and client-facing recommendations
• Support multiple client engagements simultaneously while maintaining organization and attention to detail

Skills

• 1–3 years of experience in a technical role (e.g., MSP, SOC, Systems Administration, or similar environment)
• Foundational knowledge of networking concepts (firewalls, VPNs, VLANs), security tools (EDR, SIEM, Vulnerability Scanners), and cloud infrastructure
• Basic understanding of security frameworks such as ISO 27001, NIST, or SOC 2, including the ability to understand and communicate why controls matter in a business context
• Ability to manage multiple client priorities simultaneously while maintaining strong organization and attention to detail
• Strong written and verbal communication skills, with the ability to translate technical work into clear, actionable insights
• High attention to detail and the ability to document work clearly and accurately
• Interest in working in a client-facing, consulting environment and growing into a consulting role
• Hold certifications such as ISC2 Associate (CISSP) or CompTIA certifications (e.g., Security+, Network+, Pentest+)
• Have hands-on experience with vulnerability management tools or SIEM platforms
• Have exposure to compliance-driven environments or audit support activities
• Have experience working directly with clients in a service-based or consulting environment
• Are comfortable translating technical concepts into clear, actionable recommendations

Qualifications

Must Haves

• 1–3 years of experience in a technical role (e.g., MSP, SOC, Systems Administration, or similar environment)
• Foundational knowledge of networking concepts (firewalls, VPNs, VLANs), security tools (EDR, SIEM, Vulnerability Scanners), and cloud infrastructure
• Basic understanding of security frameworks such as ISO 27001, NIST, or SOC 2, including the ability to understand and communicate why controls matter in a business context
• Ability to manage multiple client priorities simultaneously while maintaining strong organization and attention to detail
• Strong written and verbal communication skills, with the ability to translate technical work into clear, actionable insights
• High attention to detail and the ability to document work clearly and accurately
• Interest in working in a client-facing, consulting environment and growing into a consulting role

Nice to Haves

• Hold certifications such as ISC2 Associate (CISSP) or CompTIA certifications (e.g., Security+, Network+, Pentest+)
• Have hands-on experience with vulnerability management tools or SIEM platforms
• Have exposure to compliance-driven environments or audit support activities
• Have experience working directly with clients in a service-based or consulting environment
• Are comfortable translating technical concepts into clear, actionable recommendations

Benefits

• Remote-first workplace, including a $200/month work-from-home stipend
• Competitive compensation, including employer-paid health and wellness benefits
• Monthly Uber Eats meal stipend
• Monthly WeWork office stipend for flexible workspace access
• 401(k) with employer matching
• Employee bonus program
• Client and employee referral program
• Media engagement opportunities and PR exposure
• In-house manager development and leadership training
• Unlimited PTO and paid company holidays
• Employer matching gift program and volunteer paid time off
• Collaborative, team-oriented environment