• Client Delivery 

• Facilitate sessions of strategy, roadmap, design, and planning workshops for small to medium sized service engagements 

• Ensure that customer expectations are appropriately set and managed 

• Drive and manage the objectives, requirements gathering, project tasks/milestone, project status, dependencies, and timelines, to ensure engagements are delivered successfully and on time while meeting the business objectives 

• Creation and finalization of project deliverables, may perform peer review for collateral developed by others on a delivery team  

• Presentation of deliverables to client executive management 

• Knowledge of AHEAD’s project lifecycle management activities to effectively support delivery engagements throughout the duration of a project 

• Business Development 

• Support business development pursuits through client discovery meetings 

• Represent service offerings during the sales cycle, including project scoping, proposal development, and presenting proposals to clients 

• Knowledge of AHEAD’s sales management lifecycle to effectively support sales opportunities throughout the duration of a proposal  

• Assist Principal Consultants and Security Sales Specialists with engagement scoping and the creation of proposal collateral 

• Practice Development & Thought Leadership 

• Maintain subject matter expertise in a minimum of four security domains or three security solutions 

• Participate in the development, enhancement, and standardization of AHEAD in-practice service offerings 

• Enables more than one service capability 

• Maintain a broad knowledge and understanding of current and future state IT trends, technologies, and standards 

• Lend support and mentorship to Associates 

Responsibilities: 

• Cloud Security Architecture & Risk Strategy: 

• Proven experience in reviewing and implementing secure cloud reference architectures and landing zones. 

• Ability to translate risk strategy by mapping traditional lift-and-shift approaches into cloud-native security controls. 

• Strong understanding of multi-cloud governance models, including Infrastructure-as-Code (IaC), policy-as-code (PaC), tagging standards, and multi-account strategies. 

• CNAPP Tooling: 

• 2+ years of combined hands-on experience with CNAPP tools, particularly Wiz and Prisma Cloud. 

• Expertise in integrating Wiz and Prisma Cloud with enterprise tooling such as ServiceNow, CI/CD pipelines, and ticketing/alerting workflows. 

• Able to clearly and concisely communicate Wiz/Prisma outputs (criticality, risk, remediation) to technical and business stakeholders. 

• Strong track record in deploying and instantiating Prisma Cloud. 

• Cloud Platforms & Native Security Controls: 

• 2+ years of experience working with AWS, Azure, and/or GCP. 

• Familiarity with cloud-native security services such as AWS Security Hub, Microsoft Defender for Cloud, and Google Security Command Center. 

• Hands-on knowledge of cloud identity (IAM, Federation, RBAC) across multi-cloud environments. 

• Familiarity with IDaaS solutions such as Okta and Entra ID. 

• Security Frameworks & Governance: 

• Strong knowledge of security standards and frameworks: CIS Benchmarks, NIST, FedRAMP, ISO 27001, GDPR. 

• Ability to design and map cloud-specific controls for audit and compliance needs. 

• Experience with SIEM integration (Splunk, Sentinel, Chronicle) and cloud-native detection capabilities. 

• Automation, IaC & Container Security: 

• Ability to read, understand, and apply Infrastructure-as-Code (Terraform, Bicep, AWS CloudFormation). 

• Familiarity with policy-as-code tooling (OPA, Sentinel) and IaC scanning in CI/CD pipelines. 

• Proficiency in scripting (Python, PowerShell, Bash) to automate security tasks. 

• Experience with containerization (Docker, Kubernetes) and securing workloads at scale.