Soteria - Security Solutions & Advisory

Security Engineer

• Execute cybersecurity control assessments against a defined subset of key controls aligned to established frameworks (NIST SP 800-53 Rev. 5)
• Assess control implementation status using standardized criteria and validation methodologies (NIST SP 800-53A Rev. 5)
• Test information systems using documentation review, system walk-throughs, and stakeholder interviews to assess the design and operating effectiveness of NIST SP 800-53 Rev. 5 security controls
• Apply consistent judgment to determine evidence sufficiency and appropriateness
• Maintain organized evidence repositories using secure collaboration platforms
• Draft standardized assessment narratives and findings
• Contribute to assessment workbooks, reports, and presentations using approved templates and language standards
• Adhere strictly to defined assessment methodologies, scope boundaries, and validation standards
• Ensure assessments are executed consistently across multiple clients to support trend analysis and benchmarking
• Support quality assurance reviews by addressing feedback and ensuring accuracy and clarity of deliverables
• Escalate ambiguities, inconsistencies, or control interpretation questions to senior team members
• Participate in client interviews and working sessions in a professional, structured manner
• Communicate assessment expectations and evidence needs clearly to stakeholders
• Collaborate effectively with Lead Assessors and peers to meet delivery timelines

Security Advisor – Control Assessor

• Lead and perform Trusted Advisory and vCISO engagements to help organizations stand up or improve their security programs.
• Lead and perform security assessments to help organizations understand where gaps exist within their security programs and develop recommendations for remediation.
• Lead and participate in Advisory client projects to include client onboarding, documentation review, client interviews, presentation of findings, and report development and delivery.
• Work closely with clients and the Soteria team to develop deliverables to include, but not limited to: executive summary reports detailed findings and recommendations reports presentation slide decks plans of action and milestones policy and procedure development ad-hoc written reports
• Lead and coordinate with the Advisory team members to achieve excellence in the various business areas of Trusted Advisory and vCISO, Risk/Gap Assessments, Incident Response Readiness, Table Top Exercises, Business Continuity and Disaster Recovery Plans and Policy development.
• Conduct presentations for various types of stakeholders to include technical staff, support staff, executive team, and board of directors.
• Tailor communications to the client’s level of expertise, providing education and information to help them understand the bigger picture and make educated decisions.
• Communicate with prospective and existing clients to understand their security needs and develop engagement plans to satisfy their requirements, focused on the information security aspects of the client's infrastructure.
• Research cybersecurity topics and provide commentary for clients.
• Participate with and support other Soteria business areas when needed.
• Build and maintain close relationships with Soteria’s clients and help them understand the full scope of information available to make informed decisions about their security program.
• Advocate for the client’s well-being, provide expert security advice, and rally internal Soteria resources for the benefit of the client.
• Maintain updated client profile and pertinent information in internal operational support systems.
• Maintain integrity and confidentiality for sensitive client information.
• Partner with Soteria’s leadership team, service line leaders, and other Advisory members to improve service offerings.
• Train and mentor other employees in order to build the company's overall capacity and capability.
• Drive innovation by participating and working with cross-functional teams and stakeholders for the development of new product offerings, roadmaps, capabilities, and services, providing key inputs to operational delivery requirements and support models.
• Assist with advancing the maturation of our existing services by identifying and directly contributing to the creation and management of support processes, knowledge base articles, playbooks, and other documentation management as needed.

Senior Security Advisor – vCISO, Trusted Advisor

• Lead and execute cybersecurity control assessments against a defined subset of key controls aligned to established frameworks (NIST SP 800-53 Rev. 5).
• Assess control implementation status using standardized criteria and validation methodologies. (NIST SP 800-53A Rev. 5).
• Test information systems using documentation review, system walk-throughs, and stakeholder interviews to assess the design and operating effectiveness of NIST SP 800-53 Rev. 5 security controls.
• Apply consistent judgment to determine evidence sufficiency and appropriateness.
• Lead planning, kickoff, execution coordination, and closeout activities for assigned assessment engagements.
• Coordinate assessment activities and task assignments across Control Assessors to meet delivery timelines.
• Serve as the primary point of contact for client stakeholders during assessment engagements.
• Review and approve assessment narratives, findings, and control determinations prior to quality assurance submission.
• Ensure assessments are executed consistently across multiple clients to support trend analysis and benchmarking.
• Enforce adherence to defined assessment methodologies, scope boundaries, and validation standards.
• Support quality assurance reviews by addressing feedback and ensuring accuracy, clarity, and consistency of deliverables.
• Lead and participate in client interviews, system walkthroughs, and working sessions in a professional, structured manner.
• Clearly communicate assessment scope, expectations, and evidence requirements to stakeholders.
• Present assessment results, key findings, and risk implications to executive leadership and board-level stakeholders in a clear, concise, and professional manner.
• Mentor and guide Control Assessors on assessment techniques, documentation standards, and professional judgment.
• Escalate risks, issues, or control interpretation questions to program leadership as appropriate.

Security Advisor – Control Assessor

Senior Security Advisor – vCISO, Trusted Advisor

Senior Security Advisor – Lead Control Assessor