Cyber Advisor, Post-Cyber Event Hardening

The role

The Cyber Advisor implements and optimizes technical security controls within customer environments to enhance security posture following a cyber event. This role bridges the gap between recovery and long-term resilience by addressing system weaknesses across cloud and on-premise infrastructure.

What you will do

• Conduct targeted reviews of the insured's environment to identify security control gaps
• Analyze and prioritize system weaknesses across cloud and on-premise infrastructure
• Deploy security improvements including endpoint protection, email security tools, and network access controls
• Integrate zero-trust principles and identity protections
• Execute technical hardening measures to secure critical infrastructure components
• Apply technical remediations to align environments with security standards
• Evaluate and update technical betterment playbooks and toolsets
• Test and vet new security solutions
• Provide anonymized insights to help internal teams refine risk models
• Act as a subject matter expert for security and insurance teams

Required qualifications

• Proven experience in security hardening, including security control implementation and optimization across diverse, complex environments
• Deep technical knowledge in deploying and configuring Endpoint Detection and Response (EDR/MDR), Identity and Access Management (IAM), and Email Security solutions
• Extensive experience implementing Multi-Factor Authentication (MFA) and Active Directory/Entra ID security improvements
• Expertise in securing network architectures, including firewall remediation, VPN, ZTNA, SASE, and cloud environment hardening (Azure, AWS, or GCP)
• Excellent communication skills to guide customers through technical remediation steps during high-stress, post-event periods
• Proven ability to identify and categorize security control gaps and apply rapid, high-impact remediations
• Collaborative mindset to work effectively alongside internal and external teams
• Experience collecting and analyzing data from various security tools to drive risk management decisions
• Proven track record of delivering insights on emerging cyber threats and translating them into proactive defensive measures

About the company

At-Bay invented the concept of InsurSec to bridge the gap between insurance and security. The team combines risk insights from a full-stack cyber insurance carrier with full-spectrum cyber operations capabilities.