[Hiring] Advisory Purple Senior Consultant @Security Risk Advisors

Role Description

This role is part of SRA's Advisory Services team, with a focus on Purple Teams. The Senior Consultant will be responsible for leading and executing advanced purple team testing programs for Fortune 1000 companies. This role requires expertise in using the VECTR platform for managing and reporting on these exercises. The ideal candidate will have a strong background in cybersecurity, penetration testing, and incident response.

Essential Functions

• Lead Purple Team Exercises: Plan, execute, and manage purple team exercises to evaluate the effectiveness of security controls and improve the organization's defensive capabilities.
• VECTR Operations: Use the VECTR platform to document, track, and report on purple team activities. Ensure the platform is updated and maintained to reflect the latest testing methodologies and results.
• Test Preparation and Execution: Oversee the preparation, execution, and reporting of purple test cases. Ensure all activities are documented and outcomes are communicated effectively.
• Metrics and Reporting: Develop and track metrics for measuring test outcomes, including defense success metrics and trending over time to demonstrate improvements. Draft actionable observations and recommendations specific to client environments.
• Collaboration: Work closely with internal SRA teams, including Red and Blue, to integrate findings from purple team exercises into continuous improvement processes for each client.
• Client Interaction: Engage with clients to understand their security needs, provide insight into their tooling, and deliver top-tier customer service. Effectively communicate findings and strategy to client stakeholders including technical staff, executive leadership, and legal counsel.
• Training and Development: Provide training and guidance to team members on purple team methodologies and the use of VECTR.
• Research and Innovation: Use knowledge gained during purple team exercises to conduct research initiatives with the purpose of improving our services and giving back to the community.

Requirements

• Punctuality and timely attendance to external client and internal stakeholder needs.
• Bachelor’s degree in computer science, cybersecurity, information technology, or a related field OR equivalent experience.
• Minimum of 3 years of experience in cybersecurity, with a focus on technical assessments, defensive toolsets, tabletop exercises, and incident response.
• Strong understanding of red and purple team methodologies and best practices.
• Excellent communication and reporting skills, with the ability to present complex technical information to non-technical stakeholders.

Preferred Qualifications and Experience

• Relevant certifications (e.g., OSCP, CRTO, CISSP) are a plus.
• Proficiency in using the VECTR platform for managing and reporting on purple team exercises.

Benefits

• Robust internal training program, plus Company-paid external training.
• Mental Health Services: SRA has partnered with BetterHelp to provide SRA employees with free mental health support.
• Generous medical, dental, and vision benefits at different price points.
• Company-paid disability and life insurance.
• Company 401(k) plan including annual 3% safe harbor contribution.
• Free patient advocacy service that helps find care providers and resolve insurance queries.
• Free financial advising.
• Generous parental leave, sick leave, and vacation policies.
• Possibility to work remotely or with a flexible schedule when needed and approved.
• Company-paid cell phone with discounted accessories.
• 1-2-3 Give Program: SRA will give $1,000 to a charity of your choice and match additional contributions up to $1,000.
• Other discounted, employee-paid benefits including pet insurance, legal support, and voluntary life insurance.

EEO Statement

Security Risk Advisors is an Equal Opportunity Employer and prohibits discrimination or harassment of any kind. All employment decisions at SRA are based on business needs, job requirements, and individual qualifications, without regard to race, color, sex, sexual orientation, gender identity or expression, age, religion, national origin, disability, marital or family status, veteran status, medical condition, or any similar category protected under federal, state, or local laws.