Prudent Technologies and Consulting

Manage large-scale cybersecurity programs involving multiple stakeholders and drive results in a fast-paced environment. | Experience leading complex cybersecurity programs, proficiency with program management tools like Smartsheet, and strong communication skills. | Cyber Resilience Program Manager _Remote Starts off as a 6m contract, likely extend into 2027 Qualifications: Proven ability to manage large-scale programs with multiple stakeholders. Proficiency in program management tools like Smartsheet. Strong leadership and communication skills. Ability to drive results in a fast-paced environment. Experience: • Proven experience leading large, complex, cross-functional technology or cybersecurity programs at the enterprise level • Track record of delivering high-visibility initiatives involving multiple teams, regions, and executive stakeholders • Experience in consulting, technology, or data-driven environments preferred Domain Expertise: • Strong understanding of cybersecurity governance, risk, and compliance (GRC) • Experience with NIS2, DORA, or comparable regulatory frameworks strongly preferred • Familiarity with cyber resilience, third-party risk management, cloud security, and data governance concepts Differentiators • Experience driving global, enterprise-wide initiatives • Strong executive presence and communication skills • Ability to hit the ground running with minimal training Tools / Systems • Smartsheet (required) • PowerPoint (executive-level presentations) • Excel (pivot tables, data analysis) • Outlook

Lead enterprise-wide cyber resilience and regulatory compliance program aligned to NIS2 and DORA frameworks. | Proven experience managing large, complex cybersecurity programs with strong leadership and communication skills, familiarity with NIS2/DORA preferred. | Role: Cyber Resilience Program Manager Long Term Contract 100% REMOTE (EST, CST preferred) Seeking a Program Manager to lead a high-visibility, enterprise-wide initiative focused on cyber resilience and regulatory compliance, aligned to NIS2 and DORA. This role owns the end-to-end execution of a cross-functional compliance program, driving the operationalization of cybersecurity, governance, and risk management requirements across security, data, legal, and business teams. The ideal candidate excels in cross-functional leadership, stakeholder influence, and translating regulatory frameworks into scalable, audit-ready operating models. Experience: • Proven experience leading large, complex, cross-functional technology or cybersecurity programs at the enterprise level • Track record of delivering high-visibility initiatives involving multiple teams, regions, and executive stakeholders • Experience in consulting, technology, or data-driven environments preferred Domain Expertise: • Strong understanding of cybersecurity governance, risk, and compliance (GRC) • Experience with NIS2, DORA, or comparable regulatory frameworks strongly preferred • Familiarity with cyber resilience, third-party risk management, cloud security, and data governance concepts Qualifications: Proven ability to manage large-scale programs with multiple stakeholders. Proficiency in program management tools like Smartsheet. Strong leadership and communication skills. Ability to drive results in a fast-paced environment. Tools / Systems: • Smartsheet (required) • PowerPoint (executive-level presentations) • Excel (pivot tables, data analysis) • Outlook

Lead advanced DFIR, offensive security testing, CTI operations, and incident response in a senior cybersecurity role. | Requires deep technical expertise in DFIR, offensive security, threat intelligence, automation, legal discovery, and strong communication skills. | Remote position Job Title: Senior Cyber Defense & Offensive Security Specialist (DFIR | Red Team | CTI) Level 5 Role Overview Threat Research Advisory team is seeking a highly skilled and versatile cybersecurity professional to lead and execute advanced Digital Forensics & Incident Response (DFIR), Offensive Security Testing, and Cyber Threat Intelligence (CTI) operations. This role requires deep technical expertise, hands-on execution capability, and the ability to operate in high-pressure incident environments while supporting proactive security initiatives. The ideal candidate will bring a blend of forensic investigation, penetration testing, threat intelligence analysis, and automation development, with exposure to legal discovery processes and executive-level cyber risk scenarios. Key Responsibilities 1. Digital Forensics & Incident Response (DFIR) • Manage and execute incident response engagements for rapid response retainers, including: • Unauthorized access incidents • Malware outbreaks and advanced threats • Cyber extortion and ransomware attacks • Perform: • Digital evidence acquisition and forensic analysis • Deleted data recovery and memory analysis • Malware reverse engineering • Operate under legal frameworks, ensuring alignment with Attorney Work Product and legal privilege requirements 2. Offensive Security & Red Team Operations • Conduct comprehensive penetration testing and adversary simulations, including: • Internal and external network testing • Web, cloud, mobile (iOS), and thick client assessments • Wireless infrastructure testing • Execute exploitation techniques such as: • SQL injection, cross-site scripting (XSS) • Privilege escalation and credential attacks • Lead Social Engineering campaigns: • Phishing, smishing, pre-texting • Perform Physical Security Assessments: • Facility access testing • RFID cloning • USB payload deployment 3. Cyber Threat Intelligence (CTI) & Threat Hunting • Monitor and analyze intelligence across: • Surface, deep, and dark web environments • Identify risks such as: • Stolen intellectual property • Brand impersonation and typosquatting • Credential leaks and compromise indicators • Develop and operationalize: • Automation workflows and GenAI-driven threat hunting tools • IOC enrichment pipelines and intelligence correlation models 4. CSIRT Operations, Labs & E-Discovery • Support and operate 24/7 CSIRT functions, including: • Alert triage and incident containment • Deploy and manage: • Network Telemetry Analysis (NTA) sensors • Full packet capture solutions • Execute E-Discovery and forensic data processing, including: • Predictive coding models • Handling and hosting Electronically Stored Information (ESI) • Using platforms such as Relativity and Nuix 5. Incident Preparedness & Executive Protection • Develop and maintain: • Incident Response Plans (IRPs) • Decision matrices and escalation protocols • Executive reporting frameworks • Conduct: • Ransomware simulations and breach exercises • Executive tabletop scenarios • Deliver Executive Identity Protection (EIP) services: • Removal of sensitive personal data from public sources and data brokers Required Skills & Experience Technical Expertise • Proven experience in: • Multi-vector penetration testing (Network, Web, Cloud, Mobile, Wireless, Physical) • DFIR and compromise assessments • Malware analysis and reverse engineering • Strong proficiency with tools such as: • Wireshark, Nmap, Recorded Future (or equivalent CTI platforms) • Experience in: • OSINT collection and analysis • Network telemetry analysis Automation & Development • Strong scripting and development skills in: • Python • Linux-based environments • Experience building: • Security automation tools • Agentic workflows and bot-driven intelligence pipelines Forensics & Legal Discovery • Hands-on experience managing: • Electronically Stored Information (ESI) • Legal discovery workflows • Familiarity with: • Relativity, Nuix, or similar platforms Certifications Preferred certifications include: • Offensive Security Certified Professional (OSCP) • Certified Ethical Hacker (CEH) • GIAC Security Essentials (GSEC) • Additional DFIR or CTI certifications are a plus Soft Skills & Attributes • Ability to operate in high-pressure incident scenarios • Strong analytical and investigative mindset • Excellent stakeholder communication, including interaction with legal counsel and executives • Ability to bridge offensive, defensive, and intelligence domains • Strong documentation and reporting skills

Lead and deliver strategic cybersecurity initiatives aligning with business goals and regulatory requirements. | 12-15 years cybersecurity experience with strong understanding of frameworks, risk management, strategy development, and executive advisory skills. | Remote position Job Title: Cyber Strategy & Advisory - Level 4 Role Overview Seeking a highly skilled Cybersecurity Strategy & Advisory professional to lead and deliver strategic security initiatives that align with business objectives, regulatory requirements, and evolving threat landscapes. This role focuses on defining enterprise security strategy, governance models, risk management frameworks, and transformation roadmaps while advising senior leadership on cybersecurity investments and resilience Key Responsibilities 1. Cybersecurity Strategy Development • Define and implement enterprise-wide cybersecurity strategies aligned with business goals • Develop multi-year security roadmaps and capability maturity models • Align security initiatives with frameworks such as: • NIST CSF • ISO 27001 • CIS Controls . • Risk Management & Governance • Establish and manage cyber risk management frameworks and registers • Conduct enterprise-level risk assessments, threat modelling, and impact analysis • Support board-level reporting on cyber risk posture and key risk indicators (KRIs) • Define cybersecurity governance structures and operating models • Security Advisory & Consulting • Provide strategic advisory to CIOs, CISOs, and business leaders • Translate cybersecurity risks into business impact and financial terms • Support M&A security due diligence, third-party risk management, and regulatory compliance • Act as a trusted advisor during major transformation programs (cloud, digital, AI) . • Security Transformation & Programs • Lead large-scale cybersecurity transformation initiatives such as: • Zero Trust adoption • Cloud security modernization • Identity and Access Management (IAM) transformation • SOC modernization (AI-driven SOC, XDR) • Define target-state architectures and implementation roadmaps Required Skills & Experience Experience required 12 to 15 of Years in Cybersecurity Skills Required Strong understanding of: • Cybersecurity frameworks and standards • Enterprise risk management • Security architecture and controls Experience in: • Strategy development & roadmap creation • Executive-level communication & advisory • Security operating model design Certifications (Preferred) • CISA, CISM, CISSP • CRISC (highly relevant for risk-focused roles) • ISO 27001 Lead Implementer / Auditor Soft Skills & Attributes • Ability to operate in high-pressure incident scenarios • Strong analytical and investigative mindset • Excellent stakeholder communication, including interaction with legal counsel and executives • Ability to bridge offensive, defensive, and intelligence domains • Strong documentation and reporting skills

Develop and execute cyber risk, compliance, and security strategy initiatives ensuring protection of business assets and regulatory compliance. | 7-8+ years in cyber risk, compliance, audit, or security operations with relevant certifications and experience in large-scale enterprise environments. | Job Title: Cyber Risk, Compliance & Security Strategy Specialist - Level 3 Role Overview Seeking a cybersecurity professional to support the development, execution, and monitoring of long-term and short-term cyber risk, compliance, and security strategy initiatives across the information systems and network environment. This role is responsible for helping protect business assets, strengthening business continuity readiness, supporting security governance, and ensuring compliance with corporate, regulatory, and customer requirements. The ideal candidate will bring hands-on experience in risk assessments, compliance audits, vulnerability assessments, control testing, data analytics, security policy review, stakeholder education, and continuous improvement of cyber defense processes in a dynamic threat landscape. Key Responsibilities 1. Cyber Risk, Compliance & Security Strategy • Create, execute, and monitor long-term and short-term cyber risk and compliance strategies aligned to business priorities, corporate requirements, and evolving threat conditions. • Manage strategy, risk, and compliance activities across information systems, network environments, products, platforms, and supporting security operations. • Conduct procedures and control activities that support business continuity, operational resilience, and protection of critical assets. • Promote technology defense concepts, cyber risk strategies, and security methodologies designed to prevent incidents and reduce organizational exposure. • Risk Analytics, Assessments & Mitigation • Perform data analytics on products, code, systems, services, and operational processes to identify cyber risks and opportunities for avoidance, mitigation, or control improvement. • Translate risk findings into security, compliance, and control requirements for technology builds, solution designs, operational processes, and remediation plans. • Perform vulnerability assessments and on-demand compliance reviews to identify gaps, prioritize remediation, and monitor closure of risk issues. • Evaluate effectiveness of deployed security solutions, controls, and processes using measurable indicators and risk-based reporting. • Security Compliance, Audit & Control Support • Manage security compliance activities to ensure corporate, regulatory, and customer requirements are understood, implemented, monitored, and evidenced. • Perform audits, assessments, and control reviews; document findings, assess impact, and support corrective action planning. • Provide expertise and feedback on internal control initiatives, audit readiness activities, and compliance documentation. • Review policies, procedures, standards, and evidence artifacts to ensure alignment with security requirements and governance expectations. • Policy Governance, Stakeholder Education & Business Continuity • Evaluate organizational cybersecurity policies, standards, and guidelines for compliance, effectiveness, and operational applicability. • Recommend improvements to cyber policies, control practices, security processes, and risk management procedures based on audit results, threat trends, and business needs. • Educate internal and external stakeholders on security processes, procedures, compliance obligations, and cyber risk management expectations. • Support business continuity and incident readiness by ensuring security and compliance procedures remain current, practical, and aligned to operational needs. • Oversight, Team Coordination & Continuous Improvement • Manage and coordinate teams supporting cyber risk, compliance, audit, vulnerability assessment, and security governance activities. • Monitor the evolving threat landscape and assess how emerging risks may impact protected assets, compliance posture, and operational resilience. • Develop practical improvement recommendations for risk reduction, security control maturity, compliance effectiveness, and audit readiness. • Prepare clear risk, compliance, audit, and vulnerability reporting for technical stakeholders, business leaders, and governance forums. Required Skills & Experience Education & Experience • Associate degree or equivalent experience required; Bachelor s degree preferred. • Two or more relevant industry certifications preferred, such as CISSP, CISA, CISM, CRISC, Security+, or equivalent risk, audit, compliance, or cybersecurity credentials. • 7-8 + years of related experience in cyber risk management, security compliance, IT audit, vulnerability assessment, network security, or information security operations. • Working knowledge of VZ services or similar large-scale enterprise technology, network, or managed services environments. Technical Capabilities • Cybersecurity frameworks, risk assessments and management, regulatory compliance, security audits, IT auditing, and security policy frameworks. • Business planning, IT strategy, enterprise architecture frameworks, change management, priority management, and major incident management. • Cloud computing, computer security, network administration, vulnerability assessments, control testing, and security compliance monitoring. • Data analytics for product, code, platform, and operational risk identification, avoidance, mitigation, and reporting. Soft Skills & Attributes • Ability to operate in high-pressure incident scenarios • Strong analytical and investigative mindset • Excellent stakeholder communication, including interaction with legal counsel and executives • Ability to bridge offensive, defensive, and intelligence domains • Strong documentation and reporting skills

Design and implement scalable backend services using C# and .NET technologies. | Proven experience in C#/.NET backend development, distributed systems, API design, databases, and mentoring engineers. | • Job Title: C# Engineer _Remote Contract-to-Hire • Advanced proficiency in C# and .NET / .NET Core • Strong experience building scalable, production-grade backend services • Solid understanding of distributed systems and API design • Experience with databases (SQL and/or NoSQL) in high?volume environment • Proven ability to own system design and implementation Experience mentoring engineers and driving technical best practices