Professional Services Consultant

Responsibilities

• Provide technical and consultative services on NetWitness solutions across complex projects.
• Conduct workshops, analyze requirements, develop solutions, document, and train customers on NetWitness solutions.
• Collaborate with project managers, team members, and customers to ensure smooth project execution and transition.
• Deliver services independently and in teams, coordinating with sales and other personnel.
• Manage multiple work streams, define deliverables, and ensure projects adhere to methodologies, margins, and SOWs.
• Lead quality assurance activities, including technical reviews, and manage escalation procedures.
• Possibly manage or lead small to medium projects or workstreams within larger projects, understanding customer challenges and providing strategic solutions.
• Analyze data, prepare documentation, and deliver high-quality work products to ensure customer satisfaction.
• Maintain activity and progress reports, keep stakeholders informed, and complete project documentation and knowledge transfer.
• Create detailed project plans, review SOWs, and categorize requirements.

Technical Responsibilities

• Assist customers in threat hunting and detection capabilities.
• Track threat actors and their TTPs.
• Develop detection content and use cases within NetWitness for various security tools.
• Create queries, alerts, dashboards, and reports to identify potential threats and anomalies.
• Assess visibility gaps and recommend improvements.
• Support customers in enhancing detection capabilities and investigating attacks.
• Contribute to sales project scoping and technical guidance.
• Develop and maintain training content, assessments, and lab environments.
• Participate in webinars, public training, and content quality assurance.

Required Experience/Qualifications

• Understanding of logging mechanisms for network, security solutions, servers, and databases.
• Knowledge of networking and security infrastructure.
• Ability to analyze data flow in network topologies.
• Strong communication skills, both verbal and written.
• Analytical and problem-solving skills.
• Understanding of logs, events, packets, and incidents.
• Experience with collection methods like Syslog, SNMP, ODBC, LEA, FTP, SFTP.
• Knowledge of security threats, trends, and policies.
• Excellent presentation and facilitation skills.
• Federal security clearance is an advantage.