Practice Manager Cybersecurity Jobs (NOW HIRING)

• Conduct cybersecurity risk and maturity assessments using ISO 27001, NIST CSF 2.0, CIS 18, PCI-DSS, NIST 800-53, Cloud Security Alliance, and MITRE ATT&CK


• Perform security tool gap analysis, consolidation, and implementation across vulnerability management, endpoint security, SIEM, IDS/IPS, and firewall platforms


• Lead security transformation programs, including architecture design, solution implementation, and technical remediation


• Provide threat modeling, penetration testing advisory, and proactive defense strategy


• Uplift capabilities across Vulnerability Management, Incident Response, IT Disaster Recovery, Business Continuity, Threat Intelligence, and Security Monitoring


• Conduct privacy program audits supporting CCPA/CPRA and GDPR compliance


• Implement and advise on PCI-DSS compliance


• Apply MITRE ATT&CK and other threat modeling methodologies to map adversary techniques and inform defensive controls


• Review and harden application and system disaster recovery plans; identify technical gaps and develop remediation playbooks


• Assess Incident Response preparedness; design IR playbooks and runbooks and facilitate technical tabletop exercises


• Design logical and technical cloud security architectures and define functional requirements for secure cloud environments


• Architect and implement security controls for containers, infrastructure-as-code, and serverless functions


• Design and enforce API security standards and secure integration patterns across AWS, Azure, and GCP


• Conduct solution-based gap analysis and engineer controls for asset testing, code scanning, and application and infrastructure monitoring


• Drive engagement timelines, deliverables, and client confidence as a project leader


• Manage concurrent assessment, implementation, and compliance workstreams


• Lead cross-functional project teams and delegate work across Senior Associates and other practice members


• Own engagement success from scoping and project planning through final delivery

• Bachelor's degree required in Information Systems, Computer Science, Mathematics, or a related technical field


• Minimum of 5 years of Big 4 or related consulting/professional services experience with hands-on Cybersecurity engineering and advisory expertise


• Hands-on experience with AWS, Azure, and/or GCP security services and native security tooling


• Experience with containers (Docker, Kubernetes), infrastructure-as-code (Terraform, CloudFormation, Bicep), serverless security, and CI/CD pipeline security


• Experience with firewalls (Palo Alto, Fortinet, Cisco), VPN, IDS/IPS, micro segmentation, and zero-trust architecture


• Experience with EDR/XDR platforms, PAM, IAM, MFA, and SSO solutions


• Experience with Tenable, Qualys, Rapid7, or equivalent vulnerability management tools; familiarity with CVSS scoring and patch prioritization


• Experience with SAST/DAST tooling, API security testing, secure SDLC practices, and code scanning platforms


• Ability to travel locally throughout Los Angeles and Orange County


• Preferred certifications include CISSP, CCSP, AWS Certified Security Specialty, Microsoft SC-100/AZ-500, CISM, CEH, OSCP, or other relevant security certifications

Demonstrates expertise in conducting cybersecurity risk assessments and implementing security controls across cloud environments, vulnerability management, and compliance frameworks. Proficient in leading security transformation programs and ensuring adherence to industry standards such as ISO 27001 and PCI-DSS.

• Cybersecurity Risk Assessment


• Cloud Security Architecture


• Vulnerability Management Tools


• Incident Response Preparedness


• Compliance with CCPA/CPRA and GDPR

• ISO 27001


• NIST CSF 2.0


• CIS 18


• PCI-DSS


• NIST 800-53


• MITRE ATT&CK


• Threat Modeling


• Penetration Testing


• Infrastructure-as-Code


• API Security

• Project Leadership


• Cross-Functional Team Management


• Client Engagement

• CISSP


• CCSP


• AWS Certified Security Specialty


• Microsoft SC-100


• CISM


• CEH


• OSCP

• Cybersecurity Engineering


• Security Transformation Programs


• Vulnerability Management


• Incident Response


• Business Continuity

• AWS Security Services


• Azure Security Services


• GCP Security Services


• Docker


• Kubernetes


• Terraform


• CloudFormation


• Palo Alto


• Fortinet


• Cisco