Security Architect / Strategic Consultant

Security Architect / Strategic Consultant

Job Level: Architect

Job Location: Hybrid/Onsite 3 days/week (must be local to Washington, DC area- 20005 (VA, MD)

Travel Expectations: None

Job Classification: Temporary (W2T), Contractor (1099)

Join Centric Consulting - A Culture You'll Love

At Centric Consulting, we've cultivated a unique approach to business. Our business is built on three fundamental principles: Enjoy the people you work with, have fun, and do great work. These principles define our consulting model and have crafted one of the most vibrant cultures in the consulting industry - celebrating individuals, collaboration, and lifelong friendships.

Role Overview:

We are seeking a highly experienced Cybersecurity Architect / Strategic Consultant to lead and guide the development, implementation, and evolution of customer cybersecurity strategy. This role demands a deep understanding of cybersecurity frameworks, risk management, emerging technologies, and technical security controls and architecture. The ideal candidate will be a trusted advisor to senior leadership, aligning cybersecurity initiatives with business objectives to safeguard organizational assets and reputation.

In this role, you will:

Strategic Planning and Advisory:

• Develop and refine the organization's cybersecurity strategy, ensuring alignment with overall business goals.
• Provide expert guidance on implementing industry-standard security program frameworks such as NIST CSF, ISO 27001, and CIS Controls.
• Identify emerging threats and recommend proactive technical measures to mitigate risks.
• Design and enablement of cyber controls functions and processes based on CMMC / NIST 800-171, NIST 800-53

Risk Management:

• Familiarity with risk management frameworks like NIST RMF, ISO 27005, and FAIR.
• Conduct comprehensive cybersecurity risk assessments, identifying vulnerabilities and recommending remediation strategies.
• Develop and maintain a robust risk management program to address both IT and operational risks.
• Implement technical solutions to manage and monitor risk effectively, including vulnerability management tools.

Technical Oversight:

• Design and validate secure network architectures, focusing on principles such as Zero Trust and least privilege.
• Evaluate and implement advanced security technologies, including EDR, SIEM, DLP, and intrusion detection/prevention systems.
• Provide hands-on technical assessments of infrastructure, applications, and cloud environments to ensure security compliance.
• Oversee penetration testing activities and ensure identified vulnerabilities are remediated.

Policy and Governance:

• Lead the development and enforcement of cybersecurity policies, standards, and procedures.
• Establish metrics and reporting mechanisms to measure the effectiveness of cybersecurity initiatives.
• Support incident response planning and governance, ensuring technical readiness for potential breaches.

Cloud and Emerging Technologies:

• Provide technical guidance on securing multi-cloud environments, including AWS, Azure, and Google Cloud.
• Evaluate and implement cloud-native security tools, such as CSPM, CIEM, and workload protection platforms.
• Advise on emerging technologies like AI and ML, focusing on their application in threat detection and response.

Incident Response and Threat Intelligence:

• Develop and oversee technical aspects of the incident response plan, ensuring readiness for real-world threats.
• Leverage threat intelligence platforms to proactively identify and address potential vulnerabilities.
• Coordinate with SOC teams to fine-tune detection rules and improve response times.

Who You Are:

Education:

• Bachelor's or Master's degree in Cybersecurity, Computer Science, Information Technology, or a related field.

Experience:

• Minimum of 15 years of experience in information security.
• Proven experience with NIST CSF, NIST 800-53, and NIST 800-171 frameworks.
• Proven track record of developing and executing cybersecurity strategies for organizations of varying sizes and industries.
• Hands-on experience with risk assessments, compliance audits, and incident response planning.
• Prior role as a Sr. Security Consultant, Security Architect, or similar position is highly desirable.

Certifications:

• Relevant certifications (e.g., CISSP, CISM, CISA, CRISC, OSCP, CEH, or GSEC).

Skills:

• Strong understanding of cybersecurity frameworks, regulatory requirements, and risk management methodologies.
• Proficiency with technical tools such as vulnerability scanners (e.g., Nessus, Qualys), SIEM platforms (e.g., Splunk, QRadar), and EDR solutions (e.g., CrowdStrike, Cisco Secure Endpoint, Cisco Secure Workload).
• Exceptional communication and presentation skills, with the ability to convey complex cybersecurity concepts to both technical and non-technical stakeholders.
• Leadership and influence capabilities to drive organizational change.
• Analytical mindset with the ability to anticipate and solve complex challenges.
• Expertise in cloud security, Zero Trust architecture, and emerging technologies.

Total Rewards:

We proudly offer competitive compensation, a comprehensive and well-rounded benefits package for full-time employees that have been designed to nourish your well-being, such as health coverage, wellness programs, 401K company match, self-managed PTO, and other unique incentives that celebrate your accomplishments.

• Remote and Hybrid Work
• Time Off When You Need It
• Benefits That Flex
• Professional Development

While benefits eligibility may vary for roles that are not full-time, we provide unique opportunities for growth, skill development, and more. Regardless of your role, you'll be part of a collaborative environment where every team member contributes to our shared success.

Discover more about our benefits by exploring additional details here benefits.

Who We Are:

Founded in 1999 with a remote workforce, we combine the benefits of experience, flexibility, and cost efficiency to create tailored solutions centered on what's best for businesses. Now numbering more than 1,400 employees in the U.S. and India, we're committed to solving clients' toughest problems and delivering on our mission of providing unmatched experiences.

Our purpose at Centric Consulting is to bringunmatched experiencesto clients and employees. These aren't just words we use - it's how we became a company and who we are today. Providing an unmatched experience means we approach each other as human beings and lead with empathy and humility. It means we work diligently to ensure we are a place where everyone can create a sense of belonging and feel respected for who they are.

What Makes Centric a Great Place to Work?

We know that creating and sustaining an authentically welcoming culture requires that we all play a part inpromotingdiversity, equity, and inclusion, from our business practice to how we show up for employees and communities. This is how we bringour mission and core valuesto life, working together to provide the highestqualityservices to our clients while allowing our employees to reach their full potential. We are proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veterans' status, or any other characteristic protected by federal, state, or local laws.

Reasonable accommodations are available for candidates during all aspects of the selection process. Please advise the talent acquisition team if you require accommodations during the application or interview process.