Principal Technical Consultant – Cloud and Application Security

Job description

AHEAD builds platforms for digital business. By weaving together advances in cloud infrastructure, automation and analytics, and software delivery, we help enterprises deliver on the promise of digital transformation. At AHEAD, we prioritize creating a culture of belonging, where all perspectives and voices are represented, valued, respected, and heard. We create spaces to empower everyone to speak up, make change, and drive the culture at AHEAD. We are an equal opportunity employer, and do not discriminate based on an individual's race, national origin, color, gender, gender identity, gender expression, sexual orientation, religion, age, disability, marital status, or any other protected characteristic under applicable law, whether actual or perceived. ***We embrace all candidates that will contribute to the diversification and enrichment of ideas and perspectives at AHEAD.*** Principal Technical Consultants are seasoned experts in information security, cloud security, application security and DevSecOps, threat management, and related technologies, with the ability to secure applications and APIs across the cloud-native software delivery lifecycle. Successful candidates support the Security team in Delivery, Business Development, and Practice Development. Principal Technical Consultants collaborate with a diverse team of consultants with varying skills to meet and exceed client expectations through scoped engagements. They effectively facilitate and lead client engagements remotely by guiding engagements toward scoped objectives and troubleshooting to effectively resolve project risks or issues. Principal Technical Consultants effectively lead client delivery engagements by executing the necessary project tasks, producing expected collateral, and presenting artifacts at any time throughout an engagement, while acting in a leadership capacity to the project team(s). Principal Technical Consultants also support business development activities alongside a sales specialist to qualify client needs and expectations or demonstrate a capability or skillset. They may be directly engaged in client-facing interactions to identify client needs and to produce and/or present sales proposals, leading client-visioning, or discovery sessions. Principal Technical Consultants may also collaborate with other AHEAD Practice areas to identify complex, cross-practice solution sets to achieve a client’s desired state or outcome. AHEAD Principal Technical Consultants leverage their visibility and experience to contribute to the continuous improvement and maturation of in-practice service offerings and capabilities. This includes proposing ideas for new offerings and/or changes to existing offerings or initiatives, as well as their corresponding GTM efforts. They are considered a technical leader within the practice and expected to positively impact the services portfolio and individuals on the team through thought leadership and mentorship. ### Duties and Responsibilities - The following are the expectations of a Principal Technical Consultant: Client Delivery - Lead sessions of strategy, roadmap, design, and planning workshops for small to medium sized service engagements - Execute on project/program objectives, requirements gathering, project tasks/milestone, project status, dependencies, and timelines, to ensure engagements are delivered successfully and on time while meeting the business objectives - Creation and finalization of project deliverables, may perform peer review for collateral developed by others on a delivery team - Effective presentation of deliverables to project team members. - Knowledge of AHEAD’s project lifecycle management activities to effectively support delivery engagements throughout the duration of a project - Define and operationalize application security delivery plans, including secure SDLC controls, risk-based finding prioritization, developer enablement, metrics, and executive reporting. - Lead application security and threat modeling workshops covering secure architecture, abuse cases, application and API risks, and remediation planning. Technical Mastery - Proficiency in technical troubleshooting; the ability to critically think about a problem and generate a creative solution with minimal oversight. - Deep knowledge of scripting, particularly with PowerShell and/or Python, and the ability to troubleshoot developed code. - Ability to triage and validate application security findings (SAST, DAST, SCA, secrets), distinguish exploitable issues from false positives, and recommend practical remediations. - Ability to effectively communicate aspects of a technical solution to a non-technical individual. - Capability to conduct research and utilize available resources to fill in technical knowledge gaps where ambiguity presents itself. Business Development - Support business development pursuits through client discovery meetings - Represent service offerings during the sales cycle, including project scoping, proposal development, and presenting proposals to clients - Knowledge of AHEAD’s sales management lifecycle to effectively support sales opportunities throughout the duration of a proposal - Lead client discovery and/or visioning workshops to identify opportunities for cross-practice collaboration - Familiarity with AHEAD’s enterprise service portfolio to identify opportunities for cross-practice collaboration Practice Development & Thought Leadership - Maintain subject matter expertise in a minimum of eight security domains or three security solutions - Participate in the development, enhancement, and standardization of AHEAD in-practice service offerings - Owns and/or enables more than one service capability - Process-focused technology thought leader and evangelist - Maintain a broad knowledge and understanding of current and future state IT trends, technologies, and standards - Lend support and mentorship to others ### Domain experience required - Cloud Security Architecture & Risk Strategy - Proven experience in reviewing and implemen