Security Risk Advisors

Operations

• Serve as the primary owner of SRA’s PSA platform and related operational processes, driving data integrity, process consistency, resource visibility, and continuous improvement across the organization.
• Manage and mentor one direct report, including prioritization, coaching, and performance feedback.
• Establish operational standards and governance for PSA usage across the organization.
• Drive operational maturity and process optimization initiatives related to project delivery and staffing.
• Lead PSA enhancement initiatives, integrations, and automation efforts.
• Identify operational risks, inefficiencies, and data quality issues and implement corrective actions.
• Act as a subject-matter expert for SRA’s Professional Services Automation (PSA) software, currently BigTime (formerly Projector) including but not limited to set-up, permissions, reporting, and the like.
• Support delivery teams (both consultants and internal project managers) on proper use of PSA software including conducting training others in best practices.

Manager, Project Operations – PSA

Data Engineer

• Design, develop, and optimize scalable analytics solutions for large and complex datasets using Azure Data Explorer, Kusto Query Language (KQL), and related analytics technologies
• Collaborate with engineers, SMEs, and business stakeholders to model, normalize, and analyze data for reporting, operational analytics, and product-driven insights
• Build and maintain performant KQL queries, analytical workflows, data models, and reporting structures that support scalable analytics and visualization initiatives
• Design and develop interactive dashboards, reports, and visualizations within Microsoft Power BI that effectively communicate trends, operational health, risk, and business value to both technical and non-technical audiences
• Translate raw data and operational telemetry into actionable insights, meaningful metrics, and compelling data stories that support strategic and operational decision-making
• Apply statistical analysis, predictive modeling, and analytical techniques to identify trends, anomalies, patterns, and opportunities within large datasets
• Ensure data quality, integrity, and consistency through validation, reconciliation, and analytical best practices across reporting and visualization workflows
• Help define and implement best practices for analytics architecture, schema design, data modeling, query optimization, and scalable reporting solutions
• Research, prototype, and introduce innovative analytics methodologies, visualization concepts, and data-driven product capabilities
• Create and maintain documentation for data definitions, business logic, metrics, reporting methodologies, and analytics workflows
• Partner cross-functionally with engineering, product, and leadership teams to support long-term analytics strategy and platform innovation

Consultant

• Lead Purple Team Exercises: Plan, execute, and manage purple team exercises to evaluate the effectiveness of security controls and improve the organization's defensive capabilities.
• VECTR Operations: Use the VECTR platform to document, track, and report on purple team activities.
• Test Preparation and Execution: Oversee the preparation, execution, and reporting of purple test cases.
• Metrics and Reporting: Develop and track metrics for measuring test outcomes.
• Collaboration: Work closely with internal SRA teams, including Red and Blue, to integrate findings from purple team exercises into continuous improvement processes for each client.
• Client Interaction: Engage with clients to understand their security needs and communicate findings.
• Training and Development: Provide training and guidance to team members on purple team methodologies and the use of VECTR.
• Research and Innovation: Use knowledge gained during purple team exercises to conduct research initiatives for improving services.

Senior Consultant, Advisory Purple

• Lead Purple Team Exercises: Plan, execute, and manage purple team exercises to evaluate the effectiveness of security controls and improve the organization's defensive capabilities.
• VECTR Operations: Use the VECTR platform to document, track, and report on purple team activities. Ensure the platform is updated and maintained to reflect the latest testing methodologies and results.
• Test Preparation and Execution: Oversee the preparation, execution, and reporting of purple test cases. Ensure all activities are documented and outcomes are communicated effectively.
• Metrics and Reporting: Develop and track metrics for measuring test outcomes, including defense success metrics and trending over time to demonstrate improvements. Draft actionable observations and recommendations specific to client environments.
• Collaboration: Work closely with internal SRA teams, including Red and Blue, to integrate findings from purple team exercises into continuous improvement processes for each client.
• Client Interaction: Engage with clients to understand their security needs, provide insight into their tooling, and deliver top-tier customer service. Effectively communicate findings and strategy to client stakeholders including technical staff, executive leadership, and legal counsel.
• Training and Development: Provide training and guidance to team members on purple team methodologies and the use of VECTR.
• Research and Innovation: Use knowledge gained during purple team exercises to conduct research initiatives with the purpose of improving our services and giving back to the community.